Warning: Permanently added '[localhost]:63701' (ECDSA) to the list of known hosts. [ 53.778093][ T40] audit: type=1400 audit(1664715123.693:75): avc: denied { execute } for pid=3659 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 53.793984][ T40] audit: type=1400 audit(1664715123.703:76): avc: denied { execute_no_trans } for pid=3659 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/10/02 12:52:03 fuzzer started 2022/10/02 12:52:04 dialing manager at localhost:46621 [ 54.821616][ T40] audit: type=1400 audit(1664715124.733:77): avc: denied { mounton } for pid=3669 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.827652][ T3669] cgroup: Unknown subsys name 'net' [ 54.841015][ T40] audit: type=1400 audit(1664715124.733:78): avc: denied { mount } for pid=3669 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.865885][ T40] audit: type=1400 audit(1664715124.763:79): avc: denied { unmount } for pid=3669 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.028250][ T3669] cgroup: Unknown subsys name 'rlimit' [ 55.139767][ T40] audit: type=1400 audit(1664715125.053:80): avc: denied { mounton } for pid=3669 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2022/10/02 12:52:05 syscalls: 3793 2022/10/02 12:52:05 code coverage: enabled 2022/10/02 12:52:05 comparison tracing: enabled 2022/10/02 12:52:05 extra coverage: enabled [ 55.159329][ T40] audit: type=1400 audit(1664715125.063:81): avc: denied { mount } for pid=3669 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2022/10/02 12:52:05 delay kcov mmap: enabled 2022/10/02 12:52:05 setuid sandbox: enabled 2022/10/02 12:52:05 namespace sandbox: enabled 2022/10/02 12:52:05 Android sandbox: enabled 2022/10/02 12:52:05 fault injection: enabled 2022/10/02 12:52:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/10/02 12:52:05 net packet injection: enabled 2022/10/02 12:52:05 net device setup: enabled 2022/10/02 12:52:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 12:52:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 12:52:05 NIC VF setup: PCI device 0000:00:11.0 is not available 2022/10/02 12:52:05 USB emulation: enabled 2022/10/02 12:52:05 hci packet injection: enabled 2022/10/02 12:52:05 wifi device emulation: failed to parse kernel version (6.0.0-rc7-syzkaller-00239-gb357fd1c2afc) 2022/10/02 12:52:05 802.15.4 emulation: enabled [ 55.178648][ T40] audit: type=1400 audit(1664715125.063:82): avc: denied { setattr } for pid=3669 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2022/10/02 12:52:05 fetching corpus: 0, signal 0/2000 (executing program) 2022/10/02 12:52:05 fetching corpus: 50, signal 47440/51196 (executing program) 2022/10/02 12:52:05 fetching corpus: 100, signal 69567/75032 (executing program) 2022/10/02 12:52:06 fetching corpus: 150, signal 80538/87681 (executing program) 2022/10/02 12:52:06 fetching corpus: 200, signal 92488/101232 (executing program) 2022/10/02 12:52:06 fetching corpus: 250, signal 98208/108616 (executing program) 2022/10/02 12:52:07 fetching corpus: 300, signal 104453/116475 (executing program) 2022/10/02 12:52:07 fetching corpus: 350, signal 111850/125396 (executing program) 2022/10/02 12:52:07 fetching corpus: 400, signal 119278/134357 (executing program) 2022/10/02 12:52:08 fetching corpus: 450, signal 123108/139773 (executing program) 2022/10/02 12:52:08 fetching corpus: 500, signal 127523/145710 (executing program) 2022/10/02 12:52:08 fetching corpus: 550, signal 135226/154794 (executing program) 2022/10/02 12:52:08 fetching corpus: 600, signal 140022/161007 (executing program) 2022/10/02 12:52:08 fetching corpus: 650, signal 144268/166713 (executing program) 2022/10/02 12:52:08 fetching corpus: 700, signal 148615/172476 (executing program) 2022/10/02 12:52:09 fetching corpus: 750, signal 154633/179815 (executing program) 2022/10/02 12:52:09 fetching corpus: 800, signal 158961/185465 (executing program) 2022/10/02 12:52:09 fetching corpus: 850, signal 163230/191064 (executing program) 2022/10/02 12:52:09 fetching corpus: 900, signal 167375/196501 (executing program) 2022/10/02 12:52:09 fetching corpus: 950, signal 170208/200694 (executing program) 2022/10/02 12:52:10 fetching corpus: 1000, signal 175101/206811 (executing program) 2022/10/02 12:52:10 fetching corpus: 1050, signal 180134/213015 (executing program) 2022/10/02 12:52:10 fetching corpus: 1100, signal 183729/217874 (executing program) 2022/10/02 12:52:11 fetching corpus: 1150, signal 186487/221946 (executing program) 2022/10/02 12:52:11 fetching corpus: 1200, signal 190963/227635 (executing program) 2022/10/02 12:52:11 fetching corpus: 1250, signal 193037/231040 (executing program) 2022/10/02 12:52:11 fetching corpus: 1300, signal 195089/234429 (executing program) 2022/10/02 12:52:12 fetching corpus: 1350, signal 198318/238802 (executing program) 2022/10/02 12:52:12 fetching corpus: 1400, signal 201887/243484 (executing program) 2022/10/02 12:52:12 fetching corpus: 1450, signal 204087/246950 (executing program) 2022/10/02 12:52:12 fetching corpus: 1500, signal 206204/250313 (executing program) 2022/10/02 12:52:13 fetching corpus: 1550, signal 208454/253791 (executing program) 2022/10/02 12:52:13 fetching corpus: 1600, signal 211356/257822 (executing program) 2022/10/02 12:52:13 fetching corpus: 1650, signal 215614/263054 (executing program) 2022/10/02 12:52:13 fetching corpus: 1700, signal 218881/267418 (executing program) 2022/10/02 12:52:13 fetching corpus: 1750, signal 221665/271312 (executing program) 2022/10/02 12:52:14 fetching corpus: 1800, signal 223691/274512 (executing program) 2022/10/02 12:52:14 fetching corpus: 1850, signal 226813/278669 (executing program) 2022/10/02 12:52:14 fetching corpus: 1900, signal 228767/281834 (executing program) 2022/10/02 12:52:14 fetching corpus: 1950, signal 230775/284955 (executing program) 2022/10/02 12:52:14 fetching corpus: 2000, signal 232789/288082 (executing program) 2022/10/02 12:52:15 fetching corpus: 2050, signal 235691/291998 (executing program) 2022/10/02 12:52:15 fetching corpus: 2100, signal 238052/295411 (executing program) 2022/10/02 12:52:15 fetching corpus: 2150, signal 240774/299153 (executing program) 2022/10/02 12:52:15 fetching corpus: 2200, signal 242242/301755 (executing program) 2022/10/02 12:52:15 fetching corpus: 2250, signal 243991/304551 (executing program) 2022/10/02 12:52:16 fetching corpus: 2300, signal 246165/307744 (executing program) 2022/10/02 12:52:16 fetching corpus: 2350, signal 248864/311434 (executing program) 2022/10/02 12:52:16 fetching corpus: 2400, signal 250711/314283 (executing program) 2022/10/02 12:52:16 fetching corpus: 2450, signal 252634/317266 (executing program) 2022/10/02 12:52:17 fetching corpus: 2500, signal 254593/320234 (executing program) 2022/10/02 12:52:17 fetching corpus: 2550, signal 255723/322517 (executing program) 2022/10/02 12:52:17 fetching corpus: 2600, signal 257237/325139 (executing program) 2022/10/02 12:52:17 fetching corpus: 2650, signal 258891/327777 (executing program) 2022/10/02 12:52:17 fetching corpus: 2700, signal 260226/330212 (executing program) 2022/10/02 12:52:18 fetching corpus: 2750, signal 262590/333495 (executing program) 2022/10/02 12:52:18 fetching corpus: 2800, signal 264275/336174 (executing program) 2022/10/02 12:52:18 fetching corpus: 2850, signal 265993/338910 (executing program) 2022/10/02 12:52:18 fetching corpus: 2900, signal 267569/341459 (executing program) 2022/10/02 12:52:18 fetching corpus: 2950, signal 268990/343910 (executing program) 2022/10/02 12:52:19 fetching corpus: 3000, signal 271275/347078 (executing program) 2022/10/02 12:52:19 fetching corpus: 3050, signal 273870/350499 (executing program) 2022/10/02 12:52:19 fetching corpus: 3100, signal 274853/352548 (executing program) 2022/10/02 12:52:19 fetching corpus: 3150, signal 276875/355415 (executing program) 2022/10/02 12:52:20 fetching corpus: 3200, signal 279186/358497 (executing program) 2022/10/02 12:52:20 fetching corpus: 3250, signal 281052/361228 (executing program) 2022/10/02 12:52:20 fetching corpus: 3300, signal 282912/363928 (executing program) 2022/10/02 12:52:20 fetching corpus: 3350, signal 284642/366600 (executing program) 2022/10/02 12:52:21 fetching corpus: 3400, signal 285860/368813 (executing program) 2022/10/02 12:52:21 fetching corpus: 3450, signal 287670/371534 (executing program) 2022/10/02 12:52:21 fetching corpus: 3500, signal 289319/374097 (executing program) 2022/10/02 12:52:22 fetching corpus: 3550, signal 291424/376951 (executing program) 2022/10/02 12:52:22 fetching corpus: 3600, signal 293209/379558 (executing program) 2022/10/02 12:52:22 fetching corpus: 3650, signal 294765/382012 (executing program) 2022/10/02 12:52:22 fetching corpus: 3700, signal 295792/384031 (executing program) 2022/10/02 12:52:23 fetching corpus: 3750, signal 298595/387411 (executing program) 2022/10/02 12:52:23 fetching corpus: 3800, signal 299531/389324 (executing program) 2022/10/02 12:52:23 fetching corpus: 3850, signal 300830/391489 (executing program) 2022/10/02 12:52:23 fetching corpus: 3900, signal 302333/393873 (executing program) 2022/10/02 12:52:23 fetching corpus: 3950, signal 303472/395874 (executing program) 2022/10/02 12:52:24 fetching corpus: 4000, signal 305075/398282 (executing program) 2022/10/02 12:52:24 fetching corpus: 4050, signal 305960/400121 (executing program) 2022/10/02 12:52:24 fetching corpus: 4100, signal 307295/402304 (executing program) 2022/10/02 12:52:24 fetching corpus: 4150, signal 308627/404468 (executing program) 2022/10/02 12:52:25 fetching corpus: 4200, signal 309573/406347 (executing program) 2022/10/02 12:52:25 fetching corpus: 4250, signal 310970/408536 (executing program) 2022/10/02 12:52:25 fetching corpus: 4300, signal 312080/410596 (executing program) 2022/10/02 12:52:25 fetching corpus: 4350, signal 313310/412677 (executing program) 2022/10/02 12:52:26 fetching corpus: 4400, signal 314217/414488 (executing program) 2022/10/02 12:52:26 fetching corpus: 4450, signal 316311/417155 (executing program) 2022/10/02 12:52:26 fetching corpus: 4500, signal 317160/418900 (executing program) 2022/10/02 12:52:26 fetching corpus: 4550, signal 318375/420935 (executing program) 2022/10/02 12:52:27 fetching corpus: 4600, signal 319584/422879 (executing program) [ 77.304454][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.309220][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 2022/10/02 12:52:27 fetching corpus: 4650, signal 320611/424751 (executing program) 2022/10/02 12:52:27 fetching corpus: 4700, signal 321927/426807 (executing program) 2022/10/02 12:52:27 fetching corpus: 4750, signal 323162/428772 (executing program) 2022/10/02 12:52:27 fetching corpus: 4800, signal 324037/430511 (executing program) 2022/10/02 12:52:28 fetching corpus: 4850, signal 325075/432350 (executing program) 2022/10/02 12:52:28 fetching corpus: 4900, signal 326369/434415 (executing program) 2022/10/02 12:52:28 fetching corpus: 4950, signal 327444/436323 (executing program) 2022/10/02 12:52:28 fetching corpus: 5000, signal 328770/438395 (executing program) 2022/10/02 12:52:28 fetching corpus: 5050, signal 329997/440380 (executing program) 2022/10/02 12:52:29 fetching corpus: 5100, signal 331406/442481 (executing program) 2022/10/02 12:52:29 fetching corpus: 5150, signal 332915/444673 (executing program) 2022/10/02 12:52:30 fetching corpus: 5200, signal 333905/446424 (executing program) 2022/10/02 12:52:30 fetching corpus: 5250, signal 334675/448037 (executing program) 2022/10/02 12:52:30 fetching corpus: 5300, signal 336060/450060 (executing program) 2022/10/02 12:52:30 fetching corpus: 5350, signal 337473/452160 (executing program) 2022/10/02 12:52:31 fetching corpus: 5400, signal 338723/454133 (executing program) 2022/10/02 12:52:31 fetching corpus: 5450, signal 339545/455778 (executing program) 2022/10/02 12:52:31 fetching corpus: 5500, signal 340755/457661 (executing program) 2022/10/02 12:52:31 fetching corpus: 5550, signal 341747/459429 (executing program) 2022/10/02 12:52:31 fetching corpus: 5600, signal 342954/461292 (executing program) 2022/10/02 12:52:31 fetching corpus: 5650, signal 344237/463182 (executing program) 2022/10/02 12:52:32 fetching corpus: 5700, signal 345018/464757 (executing program) 2022/10/02 12:52:32 fetching corpus: 5750, signal 345902/466406 (executing program) 2022/10/02 12:52:32 fetching corpus: 5800, signal 346631/467949 (executing program) 2022/10/02 12:52:33 fetching corpus: 5850, signal 347741/469740 (executing program) 2022/10/02 12:52:33 fetching corpus: 5900, signal 348741/471442 (executing program) 2022/10/02 12:52:33 fetching corpus: 5950, signal 350083/473442 (executing program) 2022/10/02 12:52:33 fetching corpus: 6000, signal 351071/475114 (executing program) 2022/10/02 12:52:34 fetching corpus: 6050, signal 352175/476857 (executing program) 2022/10/02 12:52:34 fetching corpus: 6100, signal 352805/478314 (executing program) 2022/10/02 12:52:34 fetching corpus: 6150, signal 354068/480190 (executing program) 2022/10/02 12:52:34 fetching corpus: 6200, signal 354878/481691 (executing program) 2022/10/02 12:52:34 fetching corpus: 6250, signal 356403/483635 (executing program) 2022/10/02 12:52:35 fetching corpus: 6300, signal 357325/485243 (executing program) 2022/10/02 12:52:35 fetching corpus: 6350, signal 358160/486786 (executing program) 2022/10/02 12:52:35 fetching corpus: 6400, signal 359179/488423 (executing program) 2022/10/02 12:52:35 fetching corpus: 6450, signal 360088/490045 (executing program) 2022/10/02 12:52:36 fetching corpus: 6500, signal 361066/491669 (executing program) 2022/10/02 12:52:36 fetching corpus: 6550, signal 362376/493493 (executing program) 2022/10/02 12:52:36 fetching corpus: 6600, signal 363395/495138 (executing program) 2022/10/02 12:52:36 fetching corpus: 6650, signal 364020/496557 (executing program) 2022/10/02 12:52:37 fetching corpus: 6700, signal 365005/498148 (executing program) 2022/10/02 12:52:37 fetching corpus: 6750, signal 365751/499633 (executing program) [ 87.546351][ T51] cfg80211: failed to load regulatory.db 2022/10/02 12:52:37 fetching corpus: 6800, signal 366502/501101 (executing program) 2022/10/02 12:52:37 fetching corpus: 6850, signal 367425/502646 (executing program) 2022/10/02 12:52:38 fetching corpus: 6900, signal 368295/504162 (executing program) 2022/10/02 12:52:38 fetching corpus: 6950, signal 369309/505758 (executing program) 2022/10/02 12:52:38 fetching corpus: 7000, signal 370341/507389 (executing program) 2022/10/02 12:52:38 fetching corpus: 7050, signal 371280/508957 (executing program) 2022/10/02 12:52:38 fetching corpus: 7100, signal 372366/510585 (executing program) 2022/10/02 12:52:39 fetching corpus: 7150, signal 373430/512168 (executing program) 2022/10/02 12:52:39 fetching corpus: 7200, signal 374201/513606 (executing program) 2022/10/02 12:52:39 fetching corpus: 7250, signal 374867/514969 (executing program) 2022/10/02 12:52:39 fetching corpus: 7300, signal 375747/516463 (executing program) 2022/10/02 12:52:40 fetching corpus: 7350, signal 376455/517826 (executing program) 2022/10/02 12:52:40 fetching corpus: 7400, signal 377234/519283 (executing program) 2022/10/02 12:52:40 fetching corpus: 7450, signal 378309/520843 (executing program) 2022/10/02 12:52:40 fetching corpus: 7500, signal 379327/522413 (executing program) 2022/10/02 12:52:41 fetching corpus: 7550, signal 379901/523710 (executing program) 2022/10/02 12:52:41 fetching corpus: 7600, signal 380921/525242 (executing program) 2022/10/02 12:52:41 fetching corpus: 7650, signal 381696/526657 (executing program) 2022/10/02 12:52:41 fetching corpus: 7700, signal 382491/528011 (executing program) 2022/10/02 12:52:41 fetching corpus: 7750, signal 383053/529275 (executing program) 2022/10/02 12:52:42 fetching corpus: 7800, signal 383939/530708 (executing program) 2022/10/02 12:52:42 fetching corpus: 7850, signal 384954/532219 (executing program) 2022/10/02 12:52:42 fetching corpus: 7900, signal 385899/533641 (executing program) 2022/10/02 12:52:42 fetching corpus: 7950, signal 386839/535074 (executing program) 2022/10/02 12:52:43 fetching corpus: 8000, signal 387611/536462 (executing program) 2022/10/02 12:52:43 fetching corpus: 8050, signal 388610/537928 (executing program) 2022/10/02 12:52:43 fetching corpus: 8100, signal 389408/539253 (executing program) 2022/10/02 12:52:43 fetching corpus: 8150, signal 390315/540694 (executing program) 2022/10/02 12:52:43 fetching corpus: 8200, signal 391226/542118 (executing program) 2022/10/02 12:52:44 fetching corpus: 8250, signal 391805/543329 (executing program) 2022/10/02 12:52:44 fetching corpus: 8300, signal 392493/544611 (executing program) 2022/10/02 12:52:44 fetching corpus: 8350, signal 393150/545886 (executing program) 2022/10/02 12:52:44 fetching corpus: 8400, signal 393973/547229 (executing program) 2022/10/02 12:52:44 fetching corpus: 8450, signal 394906/548643 (executing program) 2022/10/02 12:52:45 fetching corpus: 8500, signal 395584/549890 (executing program) 2022/10/02 12:52:45 fetching corpus: 8550, signal 396239/551142 (executing program) 2022/10/02 12:52:45 fetching corpus: 8600, signal 396772/552303 (executing program) 2022/10/02 12:52:45 fetching corpus: 8650, signal 397468/553577 (executing program) 2022/10/02 12:52:45 fetching corpus: 8700, signal 398051/554795 (executing program) 2022/10/02 12:52:46 fetching corpus: 8750, signal 398935/556138 (executing program) 2022/10/02 12:52:46 fetching corpus: 8800, signal 399802/557473 (executing program) 2022/10/02 12:52:46 fetching corpus: 8850, signal 400474/558714 (executing program) 2022/10/02 12:52:46 fetching corpus: 8900, signal 401236/559933 (executing program) 2022/10/02 12:52:46 fetching corpus: 8950, signal 401950/561191 (executing program) 2022/10/02 12:52:46 fetching corpus: 9000, signal 402652/562409 (executing program) 2022/10/02 12:52:47 fetching corpus: 9050, signal 403236/563552 (executing program) 2022/10/02 12:52:47 fetching corpus: 9100, signal 403935/564771 (executing program) 2022/10/02 12:52:47 fetching corpus: 9150, signal 404958/566132 (executing program) 2022/10/02 12:52:47 fetching corpus: 9200, signal 405749/567411 (executing program) 2022/10/02 12:52:47 fetching corpus: 9250, signal 406601/568669 (executing program) 2022/10/02 12:52:48 fetching corpus: 9300, signal 407440/569923 (executing program) 2022/10/02 12:52:48 fetching corpus: 9350, signal 408117/571096 (executing program) 2022/10/02 12:52:48 fetching corpus: 9400, signal 408599/572153 (executing program) 2022/10/02 12:52:48 fetching corpus: 9450, signal 409448/573436 (executing program) 2022/10/02 12:52:48 fetching corpus: 9500, signal 410059/574622 (executing program) 2022/10/02 12:52:49 fetching corpus: 9550, signal 410679/575794 (executing program) 2022/10/02 12:52:49 fetching corpus: 9600, signal 411478/576984 (executing program) 2022/10/02 12:52:49 fetching corpus: 9650, signal 412425/578315 (executing program) 2022/10/02 12:52:49 fetching corpus: 9700, signal 413187/579521 (executing program) 2022/10/02 12:52:50 fetching corpus: 9750, signal 413989/580780 (executing program) 2022/10/02 12:52:50 fetching corpus: 9800, signal 414895/582063 (executing program) 2022/10/02 12:52:50 fetching corpus: 9850, signal 415593/583232 (executing program) 2022/10/02 12:52:50 fetching corpus: 9900, signal 416180/584313 (executing program) 2022/10/02 12:52:50 fetching corpus: 9950, signal 416630/585351 (executing program) 2022/10/02 12:52:50 fetching corpus: 10000, signal 417460/586528 (executing program) 2022/10/02 12:52:51 fetching corpus: 10050, signal 418070/587602 (executing program) 2022/10/02 12:52:51 fetching corpus: 10100, signal 418655/588715 (executing program) 2022/10/02 12:52:51 fetching corpus: 10150, signal 419487/589919 (executing program) 2022/10/02 12:52:51 fetching corpus: 10200, signal 420226/591107 (executing program) 2022/10/02 12:52:52 fetching corpus: 10250, signal 421000/592264 (executing program) 2022/10/02 12:52:52 fetching corpus: 10300, signal 422266/593631 (executing program) 2022/10/02 12:52:52 fetching corpus: 10350, signal 423048/594808 (executing program) 2022/10/02 12:52:52 fetching corpus: 10400, signal 423700/595908 (executing program) 2022/10/02 12:52:53 fetching corpus: 10450, signal 424473/597062 (executing program) 2022/10/02 12:52:53 fetching corpus: 10500, signal 425190/598171 (executing program) 2022/10/02 12:52:53 fetching corpus: 10550, signal 425899/599265 (executing program) 2022/10/02 12:52:53 fetching corpus: 10600, signal 426801/600445 (executing program) 2022/10/02 12:52:53 fetching corpus: 10650, signal 427548/601601 (executing program) 2022/10/02 12:52:54 fetching corpus: 10700, signal 428172/602650 (executing program) 2022/10/02 12:52:54 fetching corpus: 10750, signal 428801/603753 (executing program) 2022/10/02 12:52:54 fetching corpus: 10800, signal 429438/604804 (executing program) 2022/10/02 12:52:54 fetching corpus: 10850, signal 430114/605858 (executing program) 2022/10/02 12:52:54 fetching corpus: 10900, signal 430631/606892 (executing program) 2022/10/02 12:52:54 fetching corpus: 10950, signal 431018/607872 (executing program) 2022/10/02 12:52:55 fetching corpus: 11000, signal 431722/608949 (executing program) 2022/10/02 12:52:55 fetching corpus: 11050, signal 432611/610112 (executing program) 2022/10/02 12:52:55 fetching corpus: 11100, signal 433264/611140 (executing program) 2022/10/02 12:52:55 fetching corpus: 11150, signal 433810/612135 (executing program) 2022/10/02 12:52:55 fetching corpus: 11200, signal 434444/613145 (executing program) 2022/10/02 12:52:56 fetching corpus: 11250, signal 434987/614129 (executing program) 2022/10/02 12:52:56 fetching corpus: 11300, signal 435669/615194 (executing program) 2022/10/02 12:52:56 fetching corpus: 11350, signal 436218/616179 (executing program) 2022/10/02 12:52:56 fetching corpus: 11400, signal 436923/617194 (executing program) 2022/10/02 12:52:56 fetching corpus: 11450, signal 437545/618189 (executing program) 2022/10/02 12:52:57 fetching corpus: 11500, signal 438202/619270 (executing program) 2022/10/02 12:52:57 fetching corpus: 11550, signal 438769/620303 (executing program) 2022/10/02 12:52:57 fetching corpus: 11600, signal 439289/621285 (executing program) 2022/10/02 12:52:57 fetching corpus: 11650, signal 439754/622228 (executing program) 2022/10/02 12:52:58 fetching corpus: 11700, signal 440407/623196 (executing program) 2022/10/02 12:52:58 fetching corpus: 11750, signal 440889/624077 (executing program) 2022/10/02 12:52:58 fetching corpus: 11800, signal 441529/624987 (executing program) 2022/10/02 12:52:58 fetching corpus: 11850, signal 442126/625979 (executing program) 2022/10/02 12:52:58 fetching corpus: 11900, signal 442634/626943 (executing program) 2022/10/02 12:52:59 fetching corpus: 11950, signal 443275/627928 (executing program) 2022/10/02 12:52:59 fetching corpus: 12000, signal 443804/628850 (executing program) 2022/10/02 12:52:59 fetching corpus: 12050, signal 444333/629747 (executing program) 2022/10/02 12:52:59 fetching corpus: 12100, signal 445138/630757 (executing program) 2022/10/02 12:53:00 fetching corpus: 12150, signal 445873/631759 (executing program) 2022/10/02 12:53:00 fetching corpus: 12200, signal 446301/632689 (executing program) 2022/10/02 12:53:00 fetching corpus: 12250, signal 446806/633618 (executing program) 2022/10/02 12:53:00 fetching corpus: 12300, signal 447605/634654 (executing program) 2022/10/02 12:53:00 fetching corpus: 12350, signal 448350/635638 (executing program) 2022/10/02 12:53:01 fetching corpus: 12400, signal 448685/636476 (executing program) 2022/10/02 12:53:01 fetching corpus: 12450, signal 449186/637369 (executing program) 2022/10/02 12:53:01 fetching corpus: 12500, signal 449736/638263 (executing program) 2022/10/02 12:53:01 fetching corpus: 12550, signal 450422/639229 (executing program) 2022/10/02 12:53:02 fetching corpus: 12600, signal 451139/640204 (executing program) 2022/10/02 12:53:02 fetching corpus: 12650, signal 451708/641150 (executing program) 2022/10/02 12:53:02 fetching corpus: 12700, signal 452390/642119 (executing program) 2022/10/02 12:53:02 fetching corpus: 12750, signal 453426/643174 (executing program) 2022/10/02 12:53:03 fetching corpus: 12800, signal 453923/644048 (executing program) 2022/10/02 12:53:03 fetching corpus: 12850, signal 454383/644874 (executing program) 2022/10/02 12:53:03 fetching corpus: 12900, signal 454885/645760 (executing program) 2022/10/02 12:53:03 fetching corpus: 12950, signal 455528/646662 (executing program) 2022/10/02 12:53:04 fetching corpus: 13000, signal 456187/647578 (executing program) 2022/10/02 12:53:04 fetching corpus: 13050, signal 456577/648417 (executing program) 2022/10/02 12:53:04 fetching corpus: 13100, signal 457117/649319 (executing program) 2022/10/02 12:53:04 fetching corpus: 13150, signal 457625/650190 (executing program) 2022/10/02 12:53:05 fetching corpus: 13200, signal 458472/651141 (executing program) 2022/10/02 12:53:05 fetching corpus: 13250, signal 459111/652011 (executing program) 2022/10/02 12:53:05 fetching corpus: 13300, signal 460007/652916 (executing program) 2022/10/02 12:53:05 fetching corpus: 13350, signal 460404/653775 (executing program) 2022/10/02 12:53:06 fetching corpus: 13400, signal 460831/654578 (executing program) 2022/10/02 12:53:06 fetching corpus: 13450, signal 461347/655431 (executing program) 2022/10/02 12:53:06 fetching corpus: 13500, signal 461960/656331 (executing program) 2022/10/02 12:53:07 fetching corpus: 13550, signal 462592/657225 (executing program) 2022/10/02 12:53:07 fetching corpus: 13600, signal 463173/658084 (executing program) 2022/10/02 12:53:07 fetching corpus: 13650, signal 463920/658974 (executing program) 2022/10/02 12:53:07 fetching corpus: 13700, signal 464743/659905 (executing program) 2022/10/02 12:53:07 fetching corpus: 13750, signal 465492/660796 (executing program) 2022/10/02 12:53:08 fetching corpus: 13800, signal 466088/661661 (executing program) 2022/10/02 12:53:08 fetching corpus: 13850, signal 466405/662503 (executing program) 2022/10/02 12:53:08 fetching corpus: 13900, signal 466773/663257 (executing program) 2022/10/02 12:53:08 fetching corpus: 13950, signal 467241/664040 (executing program) 2022/10/02 12:53:09 fetching corpus: 14000, signal 467667/664852 (executing program) 2022/10/02 12:53:09 fetching corpus: 14050, signal 468186/665636 (executing program) 2022/10/02 12:53:09 fetching corpus: 14100, signal 468814/666458 (executing program) 2022/10/02 12:53:09 fetching corpus: 14150, signal 469393/667270 (executing program) 2022/10/02 12:53:09 fetching corpus: 14200, signal 469891/668084 (executing program) 2022/10/02 12:53:10 fetching corpus: 14250, signal 470741/668962 (executing program) 2022/10/02 12:53:10 fetching corpus: 14300, signal 471299/669751 (executing program) 2022/10/02 12:53:10 fetching corpus: 14350, signal 471780/670562 (executing program) 2022/10/02 12:53:10 fetching corpus: 14400, signal 472333/671367 (executing program) 2022/10/02 12:53:11 fetching corpus: 14450, signal 472892/672182 (executing program) 2022/10/02 12:53:11 fetching corpus: 14500, signal 473684/673020 (executing program) 2022/10/02 12:53:11 fetching corpus: 14550, signal 474159/673787 (executing program) 2022/10/02 12:53:12 fetching corpus: 14600, signal 474879/674610 (executing program) 2022/10/02 12:53:12 fetching corpus: 14650, signal 475481/675419 (executing program) 2022/10/02 12:53:12 fetching corpus: 14700, signal 475909/676138 (executing program) 2022/10/02 12:53:12 fetching corpus: 14750, signal 476348/676904 (executing program) 2022/10/02 12:53:12 fetching corpus: 14800, signal 476880/677726 (executing program) 2022/10/02 12:53:13 fetching corpus: 14850, signal 477322/678473 (executing program) 2022/10/02 12:53:13 fetching corpus: 14900, signal 477876/679232 (executing program) 2022/10/02 12:53:13 fetching corpus: 14950, signal 478288/680041 (executing program) 2022/10/02 12:53:13 fetching corpus: 15000, signal 479112/680856 (executing program) 2022/10/02 12:53:13 fetching corpus: 15050, signal 479505/681591 (executing program) 2022/10/02 12:53:14 fetching corpus: 15100, signal 479961/682318 (executing program) 2022/10/02 12:53:14 fetching corpus: 15150, signal 480461/683060 (executing program) 2022/10/02 12:53:14 fetching corpus: 15200, signal 481065/683814 (executing program) 2022/10/02 12:53:14 fetching corpus: 15250, signal 481792/684606 (executing program) 2022/10/02 12:53:15 fetching corpus: 15300, signal 482276/685354 (executing program) 2022/10/02 12:53:15 fetching corpus: 15350, signal 482722/686078 (executing program) 2022/10/02 12:53:15 fetching corpus: 15400, signal 483184/686810 (executing program) 2022/10/02 12:53:15 fetching corpus: 15450, signal 483741/687548 (executing program) 2022/10/02 12:53:15 fetching corpus: 15500, signal 484332/688311 (executing program) 2022/10/02 12:53:15 fetching corpus: 15550, signal 484888/689014 (executing program) 2022/10/02 12:53:16 fetching corpus: 15600, signal 485560/689766 (executing program) 2022/10/02 12:53:16 fetching corpus: 15650, signal 486341/690562 (executing program) 2022/10/02 12:53:16 fetching corpus: 15700, signal 486723/691254 (executing program) 2022/10/02 12:53:16 fetching corpus: 15750, signal 487097/691968 (executing program) 2022/10/02 12:53:17 fetching corpus: 15800, signal 487698/692719 (executing program) 2022/10/02 12:53:17 fetching corpus: 15850, signal 488154/693436 (executing program) 2022/10/02 12:53:17 fetching corpus: 15900, signal 488499/694131 (executing program) 2022/10/02 12:53:18 fetching corpus: 15950, signal 488896/694792 (executing program) 2022/10/02 12:53:18 fetching corpus: 16000, signal 489528/695483 (executing program) 2022/10/02 12:53:18 fetching corpus: 16050, signal 490083/696192 (executing program) 2022/10/02 12:53:18 fetching corpus: 16100, signal 490468/696901 (executing program) 2022/10/02 12:53:18 fetching corpus: 16150, signal 490976/697561 (executing program) 2022/10/02 12:53:19 fetching corpus: 16200, signal 491430/698268 (executing program) 2022/10/02 12:53:19 fetching corpus: 16250, signal 491873/698930 (executing program) 2022/10/02 12:53:19 fetching corpus: 16300, signal 492416/699608 (executing program) 2022/10/02 12:53:19 fetching corpus: 16350, signal 493025/700289 (executing program) 2022/10/02 12:53:19 fetching corpus: 16400, signal 493430/700997 (executing program) 2022/10/02 12:53:19 fetching corpus: 16450, signal 493823/701679 (executing program) 2022/10/02 12:53:20 fetching corpus: 16500, signal 494278/702368 (executing program) 2022/10/02 12:53:20 fetching corpus: 16550, signal 494597/703026 (executing program) 2022/10/02 12:53:20 fetching corpus: 16600, signal 495114/703678 (executing program) 2022/10/02 12:53:20 fetching corpus: 16650, signal 495623/704350 (executing program) 2022/10/02 12:53:20 fetching corpus: 16700, signal 496064/704957 (executing program) 2022/10/02 12:53:21 fetching corpus: 16750, signal 496542/705605 (executing program) 2022/10/02 12:53:21 fetching corpus: 16800, signal 497217/706277 (executing program) 2022/10/02 12:53:21 fetching corpus: 16850, signal 497668/706887 (executing program) 2022/10/02 12:53:22 fetching corpus: 16900, signal 498356/707531 (executing program) 2022/10/02 12:53:22 fetching corpus: 16950, signal 498755/708176 (executing program) 2022/10/02 12:53:22 fetching corpus: 17000, signal 499164/708813 (executing program) 2022/10/02 12:53:22 fetching corpus: 17050, signal 500252/709508 (executing program) 2022/10/02 12:53:22 fetching corpus: 17100, signal 500873/710150 (executing program) 2022/10/02 12:53:22 fetching corpus: 17150, signal 501222/710775 (executing program) 2022/10/02 12:53:23 fetching corpus: 17200, signal 501557/711359 (executing program) 2022/10/02 12:53:23 fetching corpus: 17250, signal 501937/711989 (executing program) 2022/10/02 12:53:23 fetching corpus: 17300, signal 502548/712603 (executing program) 2022/10/02 12:53:23 fetching corpus: 17350, signal 503298/713223 (executing program) 2022/10/02 12:53:24 fetching corpus: 17400, signal 503692/713861 (executing program) 2022/10/02 12:53:24 fetching corpus: 17450, signal 503957/714437 (executing program) 2022/10/02 12:53:24 fetching corpus: 17500, signal 504658/715027 (executing program) 2022/10/02 12:53:24 fetching corpus: 17550, signal 505037/715657 (executing program) 2022/10/02 12:53:24 fetching corpus: 17600, signal 505771/716265 (executing program) 2022/10/02 12:53:25 fetching corpus: 17650, signal 506356/716864 (executing program) 2022/10/02 12:53:25 fetching corpus: 17700, signal 506748/717465 (executing program) 2022/10/02 12:53:25 fetching corpus: 17750, signal 507512/718058 (executing program) 2022/10/02 12:53:25 fetching corpus: 17800, signal 507835/718640 (executing program) 2022/10/02 12:53:25 fetching corpus: 17850, signal 508239/719231 (executing program) 2022/10/02 12:53:26 fetching corpus: 17900, signal 508512/719860 (executing program) 2022/10/02 12:53:26 fetching corpus: 17950, signal 508866/720450 (executing program) 2022/10/02 12:53:26 fetching corpus: 18000, signal 509275/720483 (executing program) 2022/10/02 12:53:26 fetching corpus: 18050, signal 509765/720483 (executing program) 2022/10/02 12:53:26 fetching corpus: 18100, signal 510176/720483 (executing program) 2022/10/02 12:53:26 fetching corpus: 18150, signal 510552/720483 (executing program) 2022/10/02 12:53:27 fetching corpus: 18200, signal 510925/720483 (executing program) 2022/10/02 12:53:27 fetching corpus: 18250, signal 511258/720483 (executing program) 2022/10/02 12:53:27 fetching corpus: 18300, signal 511569/720483 (executing program) 2022/10/02 12:53:27 fetching corpus: 18350, signal 512152/720483 (executing program) 2022/10/02 12:53:27 fetching corpus: 18400, signal 512596/720483 (executing program) 2022/10/02 12:53:28 fetching corpus: 18450, signal 513026/720483 (executing program) 2022/10/02 12:53:28 fetching corpus: 18500, signal 513266/720483 (executing program) 2022/10/02 12:53:28 fetching corpus: 18550, signal 513785/720483 (executing program) 2022/10/02 12:53:28 fetching corpus: 18600, signal 514172/720483 (executing program) [ 138.750065][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.756689][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 2022/10/02 12:53:28 fetching corpus: 18650, signal 514646/720483 (executing program) 2022/10/02 12:53:28 fetching corpus: 18700, signal 515052/720483 (executing program) 2022/10/02 12:53:29 fetching corpus: 18750, signal 515529/720483 (executing program) 2022/10/02 12:53:29 fetching corpus: 18800, signal 515975/720483 (executing program) 2022/10/02 12:53:29 fetching corpus: 18850, signal 516345/720483 (executing program) 2022/10/02 12:53:29 fetching corpus: 18900, signal 516891/720483 (executing program) 2022/10/02 12:53:29 fetching corpus: 18950, signal 517273/720483 (executing program) 2022/10/02 12:53:30 fetching corpus: 19000, signal 517614/720483 (executing program) 2022/10/02 12:53:30 fetching corpus: 19050, signal 517931/720486 (executing program) 2022/10/02 12:53:30 fetching corpus: 19100, signal 518404/720486 (executing program) 2022/10/02 12:53:30 fetching corpus: 19150, signal 518681/720486 (executing program) 2022/10/02 12:53:31 fetching corpus: 19200, signal 518966/720486 (executing program) 2022/10/02 12:53:31 fetching corpus: 19250, signal 519407/720486 (executing program) 2022/10/02 12:53:31 fetching corpus: 19300, signal 519918/720486 (executing program) 2022/10/02 12:53:31 fetching corpus: 19350, signal 520376/720486 (executing program) 2022/10/02 12:53:31 fetching corpus: 19400, signal 520685/720486 (executing program) 2022/10/02 12:53:32 fetching corpus: 19450, signal 521082/720486 (executing program) 2022/10/02 12:53:32 fetching corpus: 19500, signal 521663/720486 (executing program) 2022/10/02 12:53:32 fetching corpus: 19550, signal 522022/720486 (executing program) 2022/10/02 12:53:32 fetching corpus: 19600, signal 522371/720488 (executing program) 2022/10/02 12:53:32 fetching corpus: 19650, signal 522855/720488 (executing program) 2022/10/02 12:53:33 fetching corpus: 19700, signal 523186/720488 (executing program) 2022/10/02 12:53:33 fetching corpus: 19750, signal 523573/720502 (executing program) 2022/10/02 12:53:33 fetching corpus: 19800, signal 523814/720502 (executing program) 2022/10/02 12:53:33 fetching corpus: 19850, signal 524170/720502 (executing program) 2022/10/02 12:53:33 fetching corpus: 19900, signal 524477/720502 (executing program) 2022/10/02 12:53:33 fetching corpus: 19950, signal 524739/720502 (executing program) 2022/10/02 12:53:34 fetching corpus: 20000, signal 525055/720502 (executing program) 2022/10/02 12:53:34 fetching corpus: 20050, signal 525429/720502 (executing program) 2022/10/02 12:53:34 fetching corpus: 20100, signal 525755/720502 (executing program) 2022/10/02 12:53:34 fetching corpus: 20150, signal 526205/720502 (executing program) 2022/10/02 12:53:34 fetching corpus: 20200, signal 526778/720502 (executing program) 2022/10/02 12:53:34 fetching corpus: 20250, signal 527247/720502 (executing program) 2022/10/02 12:53:35 fetching corpus: 20300, signal 527671/720502 (executing program) 2022/10/02 12:53:35 fetching corpus: 20350, signal 528068/720502 (executing program) 2022/10/02 12:53:35 fetching corpus: 20400, signal 528473/720502 (executing program) 2022/10/02 12:53:35 fetching corpus: 20450, signal 528759/720502 (executing program) 2022/10/02 12:53:35 fetching corpus: 20500, signal 529221/720502 (executing program) 2022/10/02 12:53:36 fetching corpus: 20550, signal 529634/720502 (executing program) 2022/10/02 12:53:36 fetching corpus: 20600, signal 529914/720502 (executing program) 2022/10/02 12:53:36 fetching corpus: 20650, signal 530279/720502 (executing program) 2022/10/02 12:53:36 fetching corpus: 20700, signal 530625/720502 (executing program) 2022/10/02 12:53:36 fetching corpus: 20750, signal 531011/720502 (executing program) 2022/10/02 12:53:36 fetching corpus: 20800, signal 531570/720502 (executing program) 2022/10/02 12:53:37 fetching corpus: 20850, signal 532108/720502 (executing program) 2022/10/02 12:53:37 fetching corpus: 20900, signal 532421/720502 (executing program) 2022/10/02 12:53:37 fetching corpus: 20950, signal 532827/720502 (executing program) 2022/10/02 12:53:37 fetching corpus: 21000, signal 533213/720502 (executing program) 2022/10/02 12:53:37 fetching corpus: 21050, signal 533539/720502 (executing program) 2022/10/02 12:53:38 fetching corpus: 21100, signal 534120/720502 (executing program) 2022/10/02 12:53:38 fetching corpus: 21150, signal 534495/720502 (executing program) 2022/10/02 12:53:38 fetching corpus: 21200, signal 534846/720502 (executing program) 2022/10/02 12:53:38 fetching corpus: 21250, signal 535141/720502 (executing program) 2022/10/02 12:53:38 fetching corpus: 21300, signal 535537/720502 (executing program) 2022/10/02 12:53:38 fetching corpus: 21350, signal 535929/720502 (executing program) 2022/10/02 12:53:39 fetching corpus: 21400, signal 536327/720502 (executing program) 2022/10/02 12:53:39 fetching corpus: 21450, signal 536713/720502 (executing program) 2022/10/02 12:53:39 fetching corpus: 21500, signal 537208/720502 (executing program) 2022/10/02 12:53:39 fetching corpus: 21550, signal 537496/720502 (executing program) 2022/10/02 12:53:40 fetching corpus: 21600, signal 537841/720514 (executing program) 2022/10/02 12:53:40 fetching corpus: 21650, signal 538226/720514 (executing program) 2022/10/02 12:53:40 fetching corpus: 21700, signal 538562/720514 (executing program) 2022/10/02 12:53:40 fetching corpus: 21750, signal 538868/720516 (executing program) 2022/10/02 12:53:40 fetching corpus: 21800, signal 539212/720517 (executing program) 2022/10/02 12:53:41 fetching corpus: 21850, signal 539513/720517 (executing program) 2022/10/02 12:53:41 fetching corpus: 21900, signal 539904/720517 (executing program) 2022/10/02 12:53:41 fetching corpus: 21950, signal 540326/720517 (executing program) 2022/10/02 12:53:41 fetching corpus: 22000, signal 540722/720517 (executing program) 2022/10/02 12:53:41 fetching corpus: 22050, signal 541052/720517 (executing program) 2022/10/02 12:53:42 fetching corpus: 22100, signal 541355/720517 (executing program) 2022/10/02 12:53:42 fetching corpus: 22150, signal 541788/720517 (executing program) 2022/10/02 12:53:42 fetching corpus: 22200, signal 542084/720517 (executing program) 2022/10/02 12:53:42 fetching corpus: 22250, signal 542432/720517 (executing program) 2022/10/02 12:53:42 fetching corpus: 22300, signal 542848/720517 (executing program) 2022/10/02 12:53:42 fetching corpus: 22350, signal 543227/720517 (executing program) 2022/10/02 12:53:43 fetching corpus: 22400, signal 543501/720517 (executing program) 2022/10/02 12:53:43 fetching corpus: 22450, signal 543870/720517 (executing program) 2022/10/02 12:53:43 fetching corpus: 22500, signal 544306/720517 (executing program) 2022/10/02 12:53:43 fetching corpus: 22550, signal 544641/720517 (executing program) 2022/10/02 12:53:43 fetching corpus: 22600, signal 544928/720517 (executing program) 2022/10/02 12:53:43 fetching corpus: 22650, signal 545264/720517 (executing program) 2022/10/02 12:53:44 fetching corpus: 22700, signal 545600/720518 (executing program) 2022/10/02 12:53:44 fetching corpus: 22750, signal 545856/720518 (executing program) 2022/10/02 12:53:44 fetching corpus: 22800, signal 546347/720520 (executing program) 2022/10/02 12:53:44 fetching corpus: 22850, signal 546604/720520 (executing program) 2022/10/02 12:53:45 fetching corpus: 22900, signal 546964/720520 (executing program) 2022/10/02 12:53:45 fetching corpus: 22950, signal 547387/720520 (executing program) 2022/10/02 12:53:45 fetching corpus: 23000, signal 547631/720520 (executing program) 2022/10/02 12:53:45 fetching corpus: 23050, signal 547934/720520 (executing program) 2022/10/02 12:53:45 fetching corpus: 23100, signal 548304/720520 (executing program) 2022/10/02 12:53:45 fetching corpus: 23150, signal 548620/720520 (executing program) 2022/10/02 12:53:46 fetching corpus: 23200, signal 548946/720520 (executing program) 2022/10/02 12:53:46 fetching corpus: 23250, signal 549164/720520 (executing program) 2022/10/02 12:53:46 fetching corpus: 23300, signal 549617/720520 (executing program) 2022/10/02 12:53:46 fetching corpus: 23350, signal 550010/720520 (executing program) 2022/10/02 12:53:46 fetching corpus: 23400, signal 550449/720520 (executing program) 2022/10/02 12:53:47 fetching corpus: 23450, signal 550907/720520 (executing program) 2022/10/02 12:53:47 fetching corpus: 23500, signal 551257/720520 (executing program) 2022/10/02 12:53:47 fetching corpus: 23550, signal 551548/720520 (executing program) 2022/10/02 12:53:47 fetching corpus: 23600, signal 551943/720520 (executing program) 2022/10/02 12:53:47 fetching corpus: 23650, signal 552434/720520 (executing program) 2022/10/02 12:53:48 fetching corpus: 23700, signal 552769/720521 (executing program) 2022/10/02 12:53:48 fetching corpus: 23750, signal 553031/720521 (executing program) 2022/10/02 12:53:48 fetching corpus: 23800, signal 553318/720521 (executing program) 2022/10/02 12:53:48 fetching corpus: 23850, signal 553649/720521 (executing program) 2022/10/02 12:53:48 fetching corpus: 23900, signal 553966/720521 (executing program) 2022/10/02 12:53:49 fetching corpus: 23950, signal 554234/720521 (executing program) 2022/10/02 12:53:49 fetching corpus: 24000, signal 554558/720521 (executing program) 2022/10/02 12:53:49 fetching corpus: 24050, signal 554838/720521 (executing program) 2022/10/02 12:53:49 fetching corpus: 24100, signal 555148/720521 (executing program) 2022/10/02 12:53:50 fetching corpus: 24150, signal 555453/720521 (executing program) 2022/10/02 12:53:50 fetching corpus: 24200, signal 555933/720521 (executing program) 2022/10/02 12:53:50 fetching corpus: 24250, signal 556328/720521 (executing program) 2022/10/02 12:53:50 fetching corpus: 24300, signal 556573/720521 (executing program) 2022/10/02 12:53:50 fetching corpus: 24350, signal 557114/720521 (executing program) 2022/10/02 12:53:50 fetching corpus: 24400, signal 557387/720521 (executing program) 2022/10/02 12:53:51 fetching corpus: 24450, signal 557613/720521 (executing program) 2022/10/02 12:53:51 fetching corpus: 24500, signal 557855/720521 (executing program) 2022/10/02 12:53:51 fetching corpus: 24550, signal 558104/720521 (executing program) 2022/10/02 12:53:51 fetching corpus: 24600, signal 558557/720521 (executing program) 2022/10/02 12:53:51 fetching corpus: 24650, signal 558913/720521 (executing program) 2022/10/02 12:53:52 fetching corpus: 24700, signal 559214/720521 (executing program) 2022/10/02 12:53:52 fetching corpus: 24750, signal 559492/720521 (executing program) 2022/10/02 12:53:52 fetching corpus: 24800, signal 559918/720521 (executing program) 2022/10/02 12:53:52 fetching corpus: 24850, signal 560442/720521 (executing program) 2022/10/02 12:53:53 fetching corpus: 24900, signal 560777/720521 (executing program) 2022/10/02 12:53:53 fetching corpus: 24950, signal 561088/720521 (executing program) 2022/10/02 12:53:53 fetching corpus: 25000, signal 561443/720521 (executing program) 2022/10/02 12:53:53 fetching corpus: 25050, signal 561833/720521 (executing program) 2022/10/02 12:53:54 fetching corpus: 25100, signal 562157/720521 (executing program) 2022/10/02 12:53:54 fetching corpus: 25150, signal 562417/720521 (executing program) 2022/10/02 12:53:54 fetching corpus: 25200, signal 562663/720521 (executing program) 2022/10/02 12:53:54 fetching corpus: 25250, signal 563022/720521 (executing program) 2022/10/02 12:53:55 fetching corpus: 25300, signal 563373/720521 (executing program) 2022/10/02 12:53:55 fetching corpus: 25350, signal 563735/720521 (executing program) 2022/10/02 12:53:55 fetching corpus: 25400, signal 564415/720521 (executing program) 2022/10/02 12:53:55 fetching corpus: 25450, signal 564621/720521 (executing program) 2022/10/02 12:53:56 fetching corpus: 25500, signal 565086/720521 (executing program) 2022/10/02 12:53:56 fetching corpus: 25550, signal 565441/720521 (executing program) 2022/10/02 12:53:56 fetching corpus: 25600, signal 565833/720521 (executing program) 2022/10/02 12:53:56 fetching corpus: 25650, signal 566188/720521 (executing program) 2022/10/02 12:53:56 fetching corpus: 25700, signal 566685/720521 (executing program) 2022/10/02 12:53:57 fetching corpus: 25750, signal 567039/720522 (executing program) 2022/10/02 12:53:57 fetching corpus: 25800, signal 567377/720522 (executing program) 2022/10/02 12:53:57 fetching corpus: 25850, signal 567763/720522 (executing program) 2022/10/02 12:53:57 fetching corpus: 25900, signal 568046/720522 (executing program) 2022/10/02 12:53:58 fetching corpus: 25950, signal 568358/720522 (executing program) 2022/10/02 12:53:58 fetching corpus: 26000, signal 568792/720522 (executing program) 2022/10/02 12:53:58 fetching corpus: 26050, signal 569120/720522 (executing program) 2022/10/02 12:53:58 fetching corpus: 26100, signal 569470/720522 (executing program) 2022/10/02 12:53:59 fetching corpus: 26150, signal 569769/720522 (executing program) 2022/10/02 12:53:59 fetching corpus: 26200, signal 570077/720522 (executing program) 2022/10/02 12:53:59 fetching corpus: 26250, signal 570369/720522 (executing program) 2022/10/02 12:53:59 fetching corpus: 26300, signal 570665/720522 (executing program) 2022/10/02 12:53:59 fetching corpus: 26350, signal 571028/720522 (executing program) 2022/10/02 12:54:00 fetching corpus: 26400, signal 571309/720522 (executing program) 2022/10/02 12:54:00 fetching corpus: 26450, signal 571533/720522 (executing program) 2022/10/02 12:54:00 fetching corpus: 26500, signal 571788/720522 (executing program) 2022/10/02 12:54:00 fetching corpus: 26550, signal 572116/720522 (executing program) 2022/10/02 12:54:00 fetching corpus: 26600, signal 572479/720525 (executing program) 2022/10/02 12:54:01 fetching corpus: 26650, signal 572758/720525 (executing program) 2022/10/02 12:54:01 fetching corpus: 26700, signal 573016/720525 (executing program) 2022/10/02 12:54:01 fetching corpus: 26750, signal 573284/720525 (executing program) 2022/10/02 12:54:01 fetching corpus: 26800, signal 573576/720525 (executing program) 2022/10/02 12:54:01 fetching corpus: 26850, signal 573958/720525 (executing program) 2022/10/02 12:54:01 fetching corpus: 26900, signal 574308/720525 (executing program) 2022/10/02 12:54:02 fetching corpus: 26950, signal 574622/720525 (executing program) 2022/10/02 12:54:02 fetching corpus: 27000, signal 574926/720525 (executing program) 2022/10/02 12:54:02 fetching corpus: 27050, signal 575237/720525 (executing program) 2022/10/02 12:54:03 fetching corpus: 27100, signal 575678/720525 (executing program) 2022/10/02 12:54:03 fetching corpus: 27150, signal 575962/720525 (executing program) 2022/10/02 12:54:03 fetching corpus: 27200, signal 576376/720525 (executing program) 2022/10/02 12:54:03 fetching corpus: 27250, signal 576691/720525 (executing program) 2022/10/02 12:54:04 fetching corpus: 27300, signal 576865/720525 (executing program) 2022/10/02 12:54:04 fetching corpus: 27350, signal 577157/720528 (executing program) 2022/10/02 12:54:04 fetching corpus: 27400, signal 577438/720528 (executing program) 2022/10/02 12:54:04 fetching corpus: 27450, signal 577772/720528 (executing program) 2022/10/02 12:54:04 fetching corpus: 27500, signal 578035/720528 (executing program) 2022/10/02 12:54:05 fetching corpus: 27550, signal 578341/720528 (executing program) 2022/10/02 12:54:05 fetching corpus: 27600, signal 578828/720528 (executing program) 2022/10/02 12:54:05 fetching corpus: 27650, signal 579180/720528 (executing program) 2022/10/02 12:54:06 fetching corpus: 27700, signal 579472/720528 (executing program) 2022/10/02 12:54:06 fetching corpus: 27750, signal 579848/720530 (executing program) 2022/10/02 12:54:06 fetching corpus: 27800, signal 580137/720530 (executing program) 2022/10/02 12:54:06 fetching corpus: 27850, signal 580406/720530 (executing program) 2022/10/02 12:54:06 fetching corpus: 27900, signal 580628/720530 (executing program) 2022/10/02 12:54:07 fetching corpus: 27950, signal 581087/720530 (executing program) 2022/10/02 12:54:07 fetching corpus: 28000, signal 581609/720530 (executing program) 2022/10/02 12:54:07 fetching corpus: 28050, signal 581920/720530 (executing program) 2022/10/02 12:54:07 fetching corpus: 28100, signal 582171/720537 (executing program) 2022/10/02 12:54:08 fetching corpus: 28150, signal 582501/720537 (executing program) 2022/10/02 12:54:08 fetching corpus: 28200, signal 582830/720537 (executing program) 2022/10/02 12:54:08 fetching corpus: 28250, signal 582990/720537 (executing program) 2022/10/02 12:54:08 fetching corpus: 28300, signal 583233/720537 (executing program) 2022/10/02 12:54:08 fetching corpus: 28350, signal 583404/720537 (executing program) 2022/10/02 12:54:09 fetching corpus: 28400, signal 583694/720537 (executing program) 2022/10/02 12:54:09 fetching corpus: 28450, signal 583993/720537 (executing program) 2022/10/02 12:54:09 fetching corpus: 28500, signal 584219/720537 (executing program) 2022/10/02 12:54:09 fetching corpus: 28550, signal 584538/720537 (executing program) 2022/10/02 12:54:09 fetching corpus: 28600, signal 585065/720537 (executing program) 2022/10/02 12:54:10 fetching corpus: 28650, signal 585352/720537 (executing program) 2022/10/02 12:54:10 fetching corpus: 28700, signal 585778/720537 (executing program) 2022/10/02 12:54:10 fetching corpus: 28750, signal 586048/720537 (executing program) 2022/10/02 12:54:10 fetching corpus: 28800, signal 586286/720537 (executing program) 2022/10/02 12:54:11 fetching corpus: 28850, signal 586637/720537 (executing program) 2022/10/02 12:54:11 fetching corpus: 28900, signal 586910/720537 (executing program) 2022/10/02 12:54:11 fetching corpus: 28950, signal 587250/720541 (executing program) 2022/10/02 12:54:11 fetching corpus: 29000, signal 587501/720541 (executing program) 2022/10/02 12:54:11 fetching corpus: 29050, signal 587907/720541 (executing program) 2022/10/02 12:54:12 fetching corpus: 29100, signal 588195/720541 (executing program) 2022/10/02 12:54:12 fetching corpus: 29150, signal 588545/720541 (executing program) 2022/10/02 12:54:12 fetching corpus: 29200, signal 588837/720542 (executing program) 2022/10/02 12:54:12 fetching corpus: 29250, signal 589152/720542 (executing program) 2022/10/02 12:54:13 fetching corpus: 29300, signal 589496/720542 (executing program) 2022/10/02 12:54:13 fetching corpus: 29350, signal 589835/720542 (executing program) 2022/10/02 12:54:13 fetching corpus: 29400, signal 590088/720542 (executing program) 2022/10/02 12:54:14 fetching corpus: 29450, signal 590356/720543 (executing program) 2022/10/02 12:54:14 fetching corpus: 29500, signal 590620/720543 (executing program) 2022/10/02 12:54:14 fetching corpus: 29550, signal 590954/720543 (executing program) 2022/10/02 12:54:14 fetching corpus: 29600, signal 591488/720543 (executing program) 2022/10/02 12:54:14 fetching corpus: 29650, signal 591836/720543 (executing program) 2022/10/02 12:54:15 fetching corpus: 29700, signal 592269/720543 (executing program) 2022/10/02 12:54:15 fetching corpus: 29750, signal 592529/720543 (executing program) 2022/10/02 12:54:15 fetching corpus: 29800, signal 592833/720543 (executing program) 2022/10/02 12:54:16 fetching corpus: 29850, signal 593047/720543 (executing program) 2022/10/02 12:54:16 fetching corpus: 29900, signal 593287/720543 (executing program) 2022/10/02 12:54:16 fetching corpus: 29950, signal 593587/720543 (executing program) 2022/10/02 12:54:16 fetching corpus: 30000, signal 593990/720543 (executing program) 2022/10/02 12:54:16 fetching corpus: 30050, signal 594214/720543 (executing program) 2022/10/02 12:54:16 fetching corpus: 30100, signal 594443/720544 (executing program) 2022/10/02 12:54:17 fetching corpus: 30150, signal 594785/720544 (executing program) 2022/10/02 12:54:17 fetching corpus: 30200, signal 595061/720544 (executing program) 2022/10/02 12:54:17 fetching corpus: 30250, signal 595401/720544 (executing program) 2022/10/02 12:54:17 fetching corpus: 30300, signal 595624/720544 (executing program) 2022/10/02 12:54:18 fetching corpus: 30350, signal 595879/720544 (executing program) 2022/10/02 12:54:18 fetching corpus: 30400, signal 596137/720544 (executing program) 2022/10/02 12:54:18 fetching corpus: 30450, signal 596517/720544 (executing program) 2022/10/02 12:54:18 fetching corpus: 30500, signal 596776/720544 (executing program) 2022/10/02 12:54:19 fetching corpus: 30550, signal 597106/720544 (executing program) 2022/10/02 12:54:19 fetching corpus: 30600, signal 597373/720544 (executing program) 2022/10/02 12:54:20 fetching corpus: 30650, signal 597836/720544 (executing program) 2022/10/02 12:54:20 fetching corpus: 30700, signal 598129/720544 (executing program) 2022/10/02 12:54:20 fetching corpus: 30750, signal 598557/720544 (executing program) 2022/10/02 12:54:20 fetching corpus: 30800, signal 598734/720544 (executing program) 2022/10/02 12:54:20 fetching corpus: 30850, signal 598957/720545 (executing program) 2022/10/02 12:54:21 fetching corpus: 30900, signal 599157/720545 (executing program) 2022/10/02 12:54:21 fetching corpus: 30950, signal 599467/720545 (executing program) 2022/10/02 12:54:21 fetching corpus: 31000, signal 599673/720545 (executing program) 2022/10/02 12:54:22 fetching corpus: 31050, signal 599928/720545 (executing program) 2022/10/02 12:54:22 fetching corpus: 31100, signal 600269/720545 (executing program) 2022/10/02 12:54:22 fetching corpus: 31150, signal 600568/720545 (executing program) 2022/10/02 12:54:22 fetching corpus: 31200, signal 601026/720545 (executing program) 2022/10/02 12:54:23 fetching corpus: 31250, signal 601361/720545 (executing program) 2022/10/02 12:54:23 fetching corpus: 31300, signal 601686/720545 (executing program) 2022/10/02 12:54:23 fetching corpus: 31350, signal 602004/720545 (executing program) 2022/10/02 12:54:23 fetching corpus: 31400, signal 602225/720545 (executing program) 2022/10/02 12:54:23 fetching corpus: 31450, signal 602547/720545 (executing program) 2022/10/02 12:54:24 fetching corpus: 31500, signal 602985/720545 (executing program) 2022/10/02 12:54:24 fetching corpus: 31550, signal 603416/720545 (executing program) 2022/10/02 12:54:24 fetching corpus: 31600, signal 603649/720545 (executing program) 2022/10/02 12:54:24 fetching corpus: 31650, signal 603882/720545 (executing program) 2022/10/02 12:54:24 fetching corpus: 31700, signal 604117/720545 (executing program) 2022/10/02 12:54:24 fetching corpus: 31750, signal 604658/720545 (executing program) 2022/10/02 12:54:25 fetching corpus: 31800, signal 604890/720545 (executing program) 2022/10/02 12:54:25 fetching corpus: 31850, signal 605137/720545 (executing program) 2022/10/02 12:54:25 fetching corpus: 31900, signal 605460/720545 (executing program) 2022/10/02 12:54:25 fetching corpus: 31950, signal 605713/720545 (executing program) 2022/10/02 12:54:26 fetching corpus: 32000, signal 605941/720545 (executing program) 2022/10/02 12:54:26 fetching corpus: 32050, signal 606170/720545 (executing program) 2022/10/02 12:54:26 fetching corpus: 32100, signal 606658/720545 (executing program) 2022/10/02 12:54:26 fetching corpus: 32150, signal 606876/720545 (executing program) 2022/10/02 12:54:26 fetching corpus: 32200, signal 607216/720545 (executing program) 2022/10/02 12:54:27 fetching corpus: 32250, signal 607515/720545 (executing program) 2022/10/02 12:54:27 fetching corpus: 32300, signal 608305/720545 (executing program) 2022/10/02 12:54:27 fetching corpus: 32350, signal 608553/720546 (executing program) 2022/10/02 12:54:27 fetching corpus: 32400, signal 608853/720546 (executing program) 2022/10/02 12:54:28 fetching corpus: 32450, signal 609369/720546 (executing program) 2022/10/02 12:54:28 fetching corpus: 32500, signal 609611/720546 (executing program) 2022/10/02 12:54:28 fetching corpus: 32550, signal 609883/720546 (executing program) 2022/10/02 12:54:28 fetching corpus: 32600, signal 610098/720546 (executing program) 2022/10/02 12:54:28 fetching corpus: 32650, signal 610382/720546 (executing program) 2022/10/02 12:54:29 fetching corpus: 32700, signal 610694/720546 (executing program) 2022/10/02 12:54:29 fetching corpus: 32750, signal 610901/720546 (executing program) 2022/10/02 12:54:29 fetching corpus: 32800, signal 611170/720546 (executing program) 2022/10/02 12:54:29 fetching corpus: 32850, signal 611424/720546 (executing program) 2022/10/02 12:54:29 fetching corpus: 32900, signal 611593/720546 (executing program) 2022/10/02 12:54:29 fetching corpus: 32950, signal 611842/720546 (executing program) 2022/10/02 12:54:30 fetching corpus: 33000, signal 612068/720546 (executing program) [ 200.186876][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.195971][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 2022/10/02 12:54:30 fetching corpus: 33050, signal 612269/720547 (executing program) 2022/10/02 12:54:30 fetching corpus: 33100, signal 612707/720547 (executing program) 2022/10/02 12:54:30 fetching corpus: 33150, signal 612928/720547 (executing program) 2022/10/02 12:54:30 fetching corpus: 33200, signal 613189/720547 (executing program) 2022/10/02 12:54:31 fetching corpus: 33250, signal 613384/720547 (executing program) 2022/10/02 12:54:31 fetching corpus: 33300, signal 613681/720547 (executing program) 2022/10/02 12:54:31 fetching corpus: 33350, signal 613820/720547 (executing program) 2022/10/02 12:54:31 fetching corpus: 33400, signal 614096/720547 (executing program) 2022/10/02 12:54:31 fetching corpus: 33450, signal 614362/720547 (executing program) 2022/10/02 12:54:32 fetching corpus: 33500, signal 614642/720547 (executing program) 2022/10/02 12:54:32 fetching corpus: 33550, signal 614873/720547 (executing program) 2022/10/02 12:54:32 fetching corpus: 33600, signal 615135/720547 (executing program) 2022/10/02 12:54:32 fetching corpus: 33650, signal 615375/720547 (executing program) 2022/10/02 12:54:32 fetching corpus: 33700, signal 615605/720547 (executing program) 2022/10/02 12:54:33 fetching corpus: 33750, signal 615842/720547 (executing program) 2022/10/02 12:54:33 fetching corpus: 33800, signal 616101/720547 (executing program) 2022/10/02 12:54:33 fetching corpus: 33850, signal 616399/720547 (executing program) 2022/10/02 12:54:33 fetching corpus: 33900, signal 616733/720547 (executing program) 2022/10/02 12:54:34 fetching corpus: 33950, signal 617029/720547 (executing program) 2022/10/02 12:54:34 fetching corpus: 34000, signal 617281/720547 (executing program) 2022/10/02 12:54:34 fetching corpus: 34050, signal 617520/720547 (executing program) 2022/10/02 12:54:34 fetching corpus: 34100, signal 617826/720547 (executing program) 2022/10/02 12:54:35 fetching corpus: 34150, signal 618058/720547 (executing program) 2022/10/02 12:54:35 fetching corpus: 34200, signal 618276/720547 (executing program) 2022/10/02 12:54:35 fetching corpus: 34250, signal 618435/720547 (executing program) 2022/10/02 12:54:35 fetching corpus: 34300, signal 618672/720547 (executing program) 2022/10/02 12:54:35 fetching corpus: 34350, signal 618882/720547 (executing program) 2022/10/02 12:54:36 fetching corpus: 34400, signal 619216/720547 (executing program) 2022/10/02 12:54:36 fetching corpus: 34450, signal 619539/720547 (executing program) 2022/10/02 12:54:36 fetching corpus: 34500, signal 619770/720547 (executing program) 2022/10/02 12:54:36 fetching corpus: 34550, signal 620208/720547 (executing program) 2022/10/02 12:54:37 fetching corpus: 34600, signal 620440/720547 (executing program) 2022/10/02 12:54:37 fetching corpus: 34650, signal 620814/720547 (executing program) 2022/10/02 12:54:37 fetching corpus: 34700, signal 621120/720580 (executing program) 2022/10/02 12:54:37 fetching corpus: 34750, signal 621333/720580 (executing program) 2022/10/02 12:54:37 fetching corpus: 34800, signal 621568/720580 (executing program) 2022/10/02 12:54:37 fetching corpus: 34850, signal 621865/720580 (executing program) 2022/10/02 12:54:38 fetching corpus: 34900, signal 622127/720580 (executing program) 2022/10/02 12:54:38 fetching corpus: 34950, signal 626790/720580 (executing program) 2022/10/02 12:54:38 fetching corpus: 35000, signal 627062/720580 (executing program) 2022/10/02 12:54:38 fetching corpus: 35050, signal 627420/720580 (executing program) 2022/10/02 12:54:39 fetching corpus: 35100, signal 627673/720580 (executing program) 2022/10/02 12:54:39 fetching corpus: 35150, signal 627973/720580 (executing program) 2022/10/02 12:54:39 fetching corpus: 35200, signal 628186/720580 (executing program) 2022/10/02 12:54:39 fetching corpus: 35250, signal 628503/720580 (executing program) 2022/10/02 12:54:39 fetching corpus: 35300, signal 628856/720580 (executing program) 2022/10/02 12:54:40 fetching corpus: 35350, signal 629031/720580 (executing program) 2022/10/02 12:54:40 fetching corpus: 35400, signal 629300/720580 (executing program) 2022/10/02 12:54:40 fetching corpus: 35450, signal 629619/720580 (executing program) 2022/10/02 12:54:40 fetching corpus: 35500, signal 629803/720580 (executing program) 2022/10/02 12:54:41 fetching corpus: 35550, signal 630080/720580 (executing program) 2022/10/02 12:54:41 fetching corpus: 35600, signal 630310/720580 (executing program) 2022/10/02 12:54:41 fetching corpus: 35650, signal 630553/720581 (executing program) 2022/10/02 12:54:41 fetching corpus: 35700, signal 630777/720581 (executing program) 2022/10/02 12:54:42 fetching corpus: 35750, signal 631010/720581 (executing program) 2022/10/02 12:54:42 fetching corpus: 35800, signal 631312/720581 (executing program) 2022/10/02 12:54:42 fetching corpus: 35850, signal 631548/720581 (executing program) 2022/10/02 12:54:42 fetching corpus: 35900, signal 631825/720581 (executing program) 2022/10/02 12:54:43 fetching corpus: 35950, signal 632024/720581 (executing program) 2022/10/02 12:54:43 fetching corpus: 36000, signal 632284/720586 (executing program) 2022/10/02 12:54:43 fetching corpus: 36050, signal 632475/720586 (executing program) 2022/10/02 12:54:43 fetching corpus: 36100, signal 632825/720586 (executing program) 2022/10/02 12:54:43 fetching corpus: 36150, signal 633057/720586 (executing program) 2022/10/02 12:54:44 fetching corpus: 36200, signal 633308/720586 (executing program) 2022/10/02 12:54:44 fetching corpus: 36250, signal 633635/720586 (executing program) 2022/10/02 12:54:44 fetching corpus: 36300, signal 633881/720586 (executing program) 2022/10/02 12:54:44 fetching corpus: 36350, signal 634118/720586 (executing program) 2022/10/02 12:54:45 fetching corpus: 36400, signal 634413/720586 (executing program) 2022/10/02 12:54:45 fetching corpus: 36450, signal 634657/720586 (executing program) 2022/10/02 12:54:45 fetching corpus: 36500, signal 634868/720586 (executing program) 2022/10/02 12:54:45 fetching corpus: 36550, signal 635115/720586 (executing program) 2022/10/02 12:54:46 fetching corpus: 36600, signal 635381/720586 (executing program) 2022/10/02 12:54:46 fetching corpus: 36650, signal 635743/720586 (executing program) 2022/10/02 12:54:46 fetching corpus: 36700, signal 636006/720586 (executing program) 2022/10/02 12:54:46 fetching corpus: 36750, signal 636289/720586 (executing program) 2022/10/02 12:54:46 fetching corpus: 36800, signal 636570/720586 (executing program) 2022/10/02 12:54:47 fetching corpus: 36850, signal 636909/720586 (executing program) 2022/10/02 12:54:47 fetching corpus: 36900, signal 637227/720586 (executing program) 2022/10/02 12:54:47 fetching corpus: 36950, signal 637493/720586 (executing program) 2022/10/02 12:54:47 fetching corpus: 37000, signal 637687/720586 (executing program) 2022/10/02 12:54:47 fetching corpus: 37050, signal 637981/720586 (executing program) 2022/10/02 12:54:48 fetching corpus: 37100, signal 638209/720586 (executing program) 2022/10/02 12:54:48 fetching corpus: 37150, signal 638462/720586 (executing program) 2022/10/02 12:54:48 fetching corpus: 37200, signal 638671/720590 (executing program) 2022/10/02 12:54:48 fetching corpus: 37250, signal 638888/720590 (executing program) 2022/10/02 12:54:48 fetching corpus: 37300, signal 639111/720591 (executing program) 2022/10/02 12:54:49 fetching corpus: 37350, signal 639413/720591 (executing program) 2022/10/02 12:54:49 fetching corpus: 37400, signal 639746/720592 (executing program) 2022/10/02 12:54:49 fetching corpus: 37450, signal 640173/720593 (executing program) 2022/10/02 12:54:49 fetching corpus: 37500, signal 640363/720593 (executing program) 2022/10/02 12:54:50 fetching corpus: 37550, signal 640593/720593 (executing program) 2022/10/02 12:54:50 fetching corpus: 37600, signal 640847/720593 (executing program) 2022/10/02 12:54:50 fetching corpus: 37650, signal 641061/720593 (executing program) 2022/10/02 12:54:50 fetching corpus: 37700, signal 641336/720593 (executing program) 2022/10/02 12:54:50 fetching corpus: 37750, signal 641620/720593 (executing program) 2022/10/02 12:54:51 fetching corpus: 37800, signal 641812/720593 (executing program) 2022/10/02 12:54:51 fetching corpus: 37850, signal 641965/720593 (executing program) 2022/10/02 12:54:51 fetching corpus: 37900, signal 642237/720593 (executing program) 2022/10/02 12:54:51 fetching corpus: 37950, signal 642434/720593 (executing program) 2022/10/02 12:54:51 fetching corpus: 38000, signal 642696/720593 (executing program) 2022/10/02 12:54:52 fetching corpus: 38050, signal 643072/720593 (executing program) 2022/10/02 12:54:52 fetching corpus: 38100, signal 643342/720593 (executing program) 2022/10/02 12:54:52 fetching corpus: 38150, signal 643674/720593 (executing program) 2022/10/02 12:54:52 fetching corpus: 38200, signal 643836/720595 (executing program) 2022/10/02 12:54:53 fetching corpus: 38250, signal 644229/720595 (executing program) 2022/10/02 12:54:53 fetching corpus: 38300, signal 644415/720595 (executing program) 2022/10/02 12:54:53 fetching corpus: 38350, signal 644603/720595 (executing program) 2022/10/02 12:54:53 fetching corpus: 38400, signal 644890/720595 (executing program) 2022/10/02 12:54:54 fetching corpus: 38450, signal 645125/720595 (executing program) 2022/10/02 12:54:54 fetching corpus: 38500, signal 645484/720595 (executing program) 2022/10/02 12:54:54 fetching corpus: 38550, signal 645867/720595 (executing program) 2022/10/02 12:54:54 fetching corpus: 38600, signal 646130/720595 (executing program) 2022/10/02 12:54:54 fetching corpus: 38650, signal 646371/720595 (executing program) 2022/10/02 12:54:55 fetching corpus: 38700, signal 646614/720595 (executing program) 2022/10/02 12:54:55 fetching corpus: 38750, signal 647466/720595 (executing program) 2022/10/02 12:54:55 fetching corpus: 38800, signal 647643/720595 (executing program) 2022/10/02 12:54:55 fetching corpus: 38850, signal 647904/720595 (executing program) 2022/10/02 12:54:55 fetching corpus: 38900, signal 648240/720595 (executing program) 2022/10/02 12:54:56 fetching corpus: 38950, signal 648497/720595 (executing program) 2022/10/02 12:54:56 fetching corpus: 39000, signal 648678/720595 (executing program) 2022/10/02 12:54:56 fetching corpus: 39050, signal 648950/720595 (executing program) 2022/10/02 12:54:56 fetching corpus: 39100, signal 649136/720595 (executing program) 2022/10/02 12:54:57 fetching corpus: 39150, signal 649359/720595 (executing program) 2022/10/02 12:54:57 fetching corpus: 39200, signal 649581/720595 (executing program) 2022/10/02 12:54:57 fetching corpus: 39250, signal 649847/720595 (executing program) 2022/10/02 12:54:57 fetching corpus: 39300, signal 650054/720595 (executing program) 2022/10/02 12:54:58 fetching corpus: 39350, signal 650517/720595 (executing program) 2022/10/02 12:54:58 fetching corpus: 39400, signal 650849/720595 (executing program) 2022/10/02 12:54:58 fetching corpus: 39450, signal 651110/720595 (executing program) 2022/10/02 12:54:58 fetching corpus: 39500, signal 651311/720595 (executing program) 2022/10/02 12:54:58 fetching corpus: 39550, signal 651516/720595 (executing program) 2022/10/02 12:54:59 fetching corpus: 39600, signal 651788/720595 (executing program) 2022/10/02 12:54:59 fetching corpus: 39650, signal 652031/720595 (executing program) 2022/10/02 12:54:59 fetching corpus: 39700, signal 652302/720595 (executing program) 2022/10/02 12:54:59 fetching corpus: 39750, signal 652654/720595 (executing program) 2022/10/02 12:54:59 fetching corpus: 39800, signal 652936/720595 (executing program) 2022/10/02 12:55:00 fetching corpus: 39850, signal 653150/720595 (executing program) 2022/10/02 12:55:00 fetching corpus: 39900, signal 653403/720596 (executing program) 2022/10/02 12:55:00 fetching corpus: 39950, signal 653667/720596 (executing program) 2022/10/02 12:55:00 fetching corpus: 40000, signal 653885/720596 (executing program) 2022/10/02 12:55:00 fetching corpus: 40039, signal 654064/720596 (executing program) 2022/10/02 12:55:00 fetching corpus: 40039, signal 654064/720596 (executing program) 2022/10/02 12:55:04 starting 4 fuzzer processes 12:55:04 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x64, 0x0, 0x0, 0x7fff0000}]}) 12:55:04 executing program 1: r0 = socket(0x2a, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000000), 0xc) 12:55:04 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_sock_diag(0x10, 0x3, 0x4) 12:55:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) [ 234.330737][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 234.330792][ T40] audit: type=1400 audit(1664715304.243:86): avc: denied { execmem } for pid=3706 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 234.580726][ T40] audit: type=1400 audit(1664715304.493:87): avc: denied { mounton } for pid=3710 comm="syz-executor.3" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 234.609309][ T40] audit: type=1400 audit(1664715304.513:88): avc: denied { mount } for pid=3710 comm="syz-executor.3" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 234.638277][ T40] audit: type=1400 audit(1664715304.513:89): avc: denied { create } for pid=3710 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.654493][ T40] audit: type=1400 audit(1664715304.523:90): avc: denied { read write } for pid=3710 comm="syz-executor.3" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 234.676807][ T40] audit: type=1400 audit(1664715304.523:91): avc: denied { open } for pid=3710 comm="syz-executor.3" path="/dev/vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 235.653431][ T40] audit: type=1400 audit(1664715305.573:92): avc: denied { ioctl } for pid=3710 comm="syz-executor.3" path="socket:[27421]" dev="sockfs" ino=27421 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.665684][ T3717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.684103][ T3717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.694177][ T3717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.703958][ T3717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.710142][ T3717] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 235.717046][ T3719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.719693][ T3718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.728549][ T3718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.730349][ T40] audit: type=1400 audit(1664715305.643:93): avc: denied { read } for pid=3710 comm="syz-executor.3" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 235.735692][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.750971][ T40] audit: type=1400 audit(1664715305.643:94): avc: denied { open } for pid=3710 comm="syz-executor.3" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 235.758120][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.775917][ T40] audit: type=1400 audit(1664715305.653:95): avc: denied { mounton } for pid=3710 comm="syz-executor.3" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 235.783499][ T3717] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.805259][ T3723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.805410][ T3719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.815081][ T3719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.817826][ T3717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.820328][ T3719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.825798][ T3717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.830384][ T3719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.834143][ T3717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.838375][ T3719] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.843248][ T3717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.847978][ T3719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.852008][ T3717] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.862142][ T3719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.184866][ T3710] chnl_net:caif_netlink_parms(): no params data found [ 236.286625][ T3711] chnl_net:caif_netlink_parms(): no params data found [ 236.309655][ T3712] chnl_net:caif_netlink_parms(): no params data found [ 236.482496][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.490729][ T3710] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.505661][ T3710] device bridge_slave_0 entered promiscuous mode [ 236.623731][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.644645][ T3710] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.652628][ T3710] device bridge_slave_1 entered promiscuous mode [ 236.790495][ T3712] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.797326][ T3712] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.807040][ T3712] device bridge_slave_0 entered promiscuous mode [ 236.813143][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.820413][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.830076][ T3711] device bridge_slave_0 entered promiscuous mode [ 236.846232][ T3712] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.864895][ T3712] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.883049][ T3712] device bridge_slave_1 entered promiscuous mode [ 236.896409][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.904119][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.927461][ T3711] device bridge_slave_1 entered promiscuous mode [ 237.026779][ T3710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.095689][ T3710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.151799][ T3712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.193182][ T3711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.212861][ T3712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.231258][ T3711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.399908][ T3710] team0: Port device team_slave_0 added [ 237.449550][ T3712] team0: Port device team_slave_0 added [ 237.457893][ T3710] team0: Port device team_slave_1 added [ 237.486501][ T3712] team0: Port device team_slave_1 added [ 237.498567][ T3711] team0: Port device team_slave_0 added [ 237.697378][ T3711] team0: Port device team_slave_1 added [ 237.792447][ T24] Bluetooth: hci0: command 0x0409 tx timeout [ 237.847764][ T3710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.855832][ T3710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.871575][ T24] Bluetooth: hci1: command 0x0409 tx timeout [ 237.878658][ T3710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.898811][ T3712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.904173][ T3712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.930906][ T3712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.940814][ T3711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.947733][ T972] Bluetooth: hci3: command 0x0409 tx timeout [ 237.951573][ T172] Bluetooth: hci2: command 0x0409 tx timeout [ 237.952583][ T3711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.980338][ T3711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.991229][ T3710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.000817][ T3710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.039545][ T3710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.058502][ T3712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.064937][ T3712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.089305][ T3712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.141117][ T3711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.146907][ T3711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.181468][ T3711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.217021][ T3713] chnl_net:caif_netlink_parms(): no params data found [ 238.562151][ T3712] device hsr_slave_0 entered promiscuous mode [ 238.569007][ T3712] device hsr_slave_1 entered promiscuous mode [ 238.582086][ T3710] device hsr_slave_0 entered promiscuous mode [ 238.594902][ T3710] device hsr_slave_1 entered promiscuous mode [ 238.604852][ T3710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.614621][ T3710] Cannot create hsr debugfs directory [ 238.623315][ T3711] device hsr_slave_0 entered promiscuous mode [ 238.630110][ T3711] device hsr_slave_1 entered promiscuous mode [ 238.639055][ T3711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.645330][ T3711] Cannot create hsr debugfs directory [ 239.587344][ T3713] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.593338][ T3713] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.612879][ T3713] device bridge_slave_0 entered promiscuous mode [ 239.861824][ T972] Bluetooth: hci0: command 0x041b tx timeout [ 239.885828][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.895812][ T3713] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.918807][ T3713] device bridge_slave_1 entered promiscuous mode [ 239.941561][ T24] Bluetooth: hci1: command 0x041b tx timeout [ 240.021848][ T24] Bluetooth: hci2: command 0x041b tx timeout [ 240.030512][ T24] Bluetooth: hci3: command 0x041b tx timeout [ 240.776282][ T3712] syz-executor.1 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 240.784660][ T3712] CPU: 1 PID: 3712 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-00239-gb357fd1c2afc #0 [ 240.792388][ T3712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 240.804116][ T3712] Call Trace: [ 240.806626][ T3712] [ 240.809028][ T3712] dump_stack_lvl+0xcd/0x134 [ 240.813062][ T3712] dump_header+0x10b/0x7f9 [ 240.816316][ T3712] oom_kill_process.cold+0x10/0x15 [ 240.819943][ T3712] out_of_memory+0x11e1/0x14a0 [ 240.824344][ T3712] ? oom_killer_disable+0x270/0x270 [ 240.829148][ T3712] __alloc_pages_slowpath.constprop.0+0x1cb2/0x2300 [ 240.834204][ T3712] ? warn_alloc+0x190/0x190 [ 240.837051][ T3712] ? prepare_alloc_pages+0x178/0x570 [ 240.840072][ T3712] __alloc_pages+0x43d/0x510 [ 240.843007][ T3712] ? rcu_read_lock_sched_held+0x3a/0x70 [ 240.846435][ T3712] ? __alloc_pages_slowpath.constprop.0+0x2300/0x2300 [ 240.851304][ T3712] ? __alloc_pages_slowpath.constprop.0+0x2300/0x2300 [ 240.855429][ T3712] ? mark_held_locks+0x9f/0xe0 [ 240.858167][ T3712] ? cache_grow_begin+0x26e/0x360 [ 240.861088][ T3712] cache_grow_begin+0x75/0x360 [ 240.863810][ T3712] fallback_alloc+0x1e2/0x2d0 [ 240.866701][ T3712] __kmalloc_track_caller+0x2d7/0x4a0 [ 240.869910][ T3712] ? neigh_sysctl_register+0x9a/0x5e0 [ 240.873276][ T3712] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 240.877452][ T3712] kmemdup+0x23/0x50 [ 240.880120][ T3712] neigh_sysctl_register+0x9a/0x5e0 [ 240.883533][ T3712] ? neigh_stat_seq_show+0x420/0x420 [ 240.886935][ T3712] ? inetdev_init+0x23d/0x580 [ 240.890479][ T3712] ? inetdev_event+0xa85/0x1610 [ 240.894011][ T3712] ? notifier_call_chain+0xb5/0x200 [ 240.897393][ T3712] ? call_netdevice_notifiers_info+0xb5/0x130 [ 240.902018][ T3712] ? register_netdevice+0x1127/0x1680 [ 240.905709][ T3712] ? veth_newlink+0x33f/0x9a0 [ 240.909121][ T3712] ? __rtnl_newlink+0x1087/0x17e0 [ 240.912441][ T3712] ? rtnl_newlink+0x64/0xa0 [ 240.915172][ T3712] ? rtnetlink_rcv_msg+0x43a/0xca0 [ 240.918330][ T3712] ? netlink_rcv_skb+0x153/0x420 [ 240.921437][ T3712] ? netlink_unicast+0x543/0x7f0 [ 240.924615][ T3712] ? netlink_sendmsg+0x917/0xe10 [ 240.927847][ T3712] ? sock_sendmsg+0xcf/0x120 [ 240.930970][ T3712] ? __sys_sendto+0x236/0x340 [ 240.934744][ T3712] ? __x64_sys_sendto+0xdd/0x1b0 [ 240.938078][ T3712] devinet_sysctl_register+0xb1/0x230 [ 240.941616][ T3712] inetdev_init+0x286/0x580 [ 240.945106][ T3712] inetdev_event+0xa85/0x1610 [ 240.948982][ T3712] ? del_default_gids+0xd0/0xd0 [ 240.953051][ T3712] ? is_ndev_for_default_gid_filter.part.0+0x2e0/0x2e0 [ 240.958538][ T3712] ? devinet_init_net+0x640/0x640 [ 240.962389][ T3712] ? skb_dequeue+0x125/0x180 [ 240.966177][ T3712] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 240.970658][ T3712] notifier_call_chain+0xb5/0x200 [ 240.974288][ T3712] call_netdevice_notifiers_info+0xb5/0x130 [ 240.978541][ T3712] register_netdevice+0x1127/0x1680 [ 240.983286][ T3712] ? netdev_change_features+0xb0/0xb0 [ 240.987634][ T3712] ? dev_addr_mod+0x2c9/0x3f0 [ 240.991459][ T3712] veth_newlink+0x33f/0x9a0 [ 240.995346][ T3712] ? veth_set_features+0x190/0x190 [ 240.999378][ T3712] ? netlink_unicast+0x543/0x7f0 [ 241.003754][ T3712] ? netlink_sendmsg+0x917/0xe10 [ 241.007341][ T3712] ? sock_sendmsg+0xcf/0x120 [ 241.010699][ T3712] ? memcpy+0x39/0x60 [ 241.013372][ T3712] ? alloc_netdev_mqs+0xd5d/0x1180 [ 241.016513][ T3712] ? rtnl_create_link+0x7e8/0xc00 [ 241.019640][ T3712] ? veth_set_features+0x190/0x190 [ 241.022616][ T3712] __rtnl_newlink+0x1087/0x17e0 [ 241.026219][ T3712] ? rtnl_link_unregister+0x250/0x250 [ 241.029599][ T3712] ? find_held_lock+0x2d/0x110 [ 241.032319][ T3712] ? rcu_read_lock_sched_held+0x3a/0x70 [ 241.035528][ T3712] ? trace_kmalloc+0x32/0x100 [ 241.038245][ T3712] ? kmem_cache_alloc_trace+0x278/0x460 [ 241.041530][ T3712] rtnl_newlink+0x64/0xa0 [ 241.044066][ T3712] ? __rtnl_newlink+0x17e0/0x17e0 [ 241.046992][ T3712] rtnetlink_rcv_msg+0x43a/0xca0 [ 241.049881][ T3712] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 241.052695][ T3712] netlink_rcv_skb+0x153/0x420 [ 241.056599][ T3712] ? rtnl_fdb_dump+0x9a0/0x9a0 [ 241.060437][ T3712] ? netlink_ack+0xa80/0xa80 [ 241.063884][ T3712] ? netlink_deliver_tap+0x1a2/0xc40 [ 241.067210][ T3712] ? netlink_deliver_tap+0x1b1/0xc40 [ 241.070706][ T3712] netlink_unicast+0x543/0x7f0 [ 241.073760][ T3712] ? netlink_attachskb+0x880/0x880 [ 241.076629][ T3712] netlink_sendmsg+0x917/0xe10 [ 241.079818][ T3712] ? netlink_unicast+0x7f0/0x7f0 [ 241.082903][ T3712] ? netlink_unicast+0x7f0/0x7f0 [ 241.086386][ T3712] sock_sendmsg+0xcf/0x120 [ 241.089816][ T3712] __sys_sendto+0x236/0x340 [ 241.093442][ T3712] ? __ia32_sys_getpeername+0xb0/0xb0 [ 241.096883][ T3712] ? __ct_user_exit+0xff/0x150 [ 241.099816][ T3712] ? lock_downgrade+0x6e0/0x6e0 [ 241.102975][ T3712] ? up_write+0x470/0x470 [ 241.106166][ T3712] __x64_sys_sendto+0xdd/0x1b0 [ 241.109476][ T3712] ? syscall_enter_from_user_mode+0x22/0xb0 [ 241.113409][ T3712] do_syscall_64+0x35/0xb0 [ 241.116412][ T3712] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 241.120343][ T3712] RIP: 0033:0x7fe1cda3c4fc [ 241.123172][ T3712] Code: Unable to access opcode bytes at RIP 0x7fe1cda3c4d2. [ 241.127319][ T3712] RSP: 002b:00007fffacf9a4e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 241.133385][ T3712] RAX: ffffffffffffffda RBX: 00007fe1ceae4320 RCX: 00007fe1cda3c4fc [ 241.140804][ T3712] RDX: 000000000000006c RSI: 00007fe1ceae4370 RDI: 0000000000000003 [ 241.146593][ T3712] RBP: 0000000000000000 R08: 00007fffacf9a534 R09: 000000000000000c [ 241.152289][ T3712] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 241.159233][ T3712] R13: 00007fe1ceae4370 R14: 0000000000000003 R15: 0000000000000000 [ 241.164392][ T3712] [ 241.177396][ T3712] Mem-Info: [ 241.180947][ T3712] active_anon:247 inactive_anon:181693 isolated_anon:0 [ 241.180947][ T3712] active_file:32 inactive_file:19 isolated_file:0 [ 241.180947][ T3712] unevictable:1536 dirty:0 writeback:0 [ 241.180947][ T3712] slab_reclaimable:15509 slab_unreclaimable:45642 [ 241.180947][ T3712] mapped:8213 shmem:2059 pagetables:678 bounce:0 [ 241.180947][ T3712] kernel_misc_reclaimable:0 [ 241.180947][ T3712] free:17370 free_pcp:251 free_cma:0 [ 241.228937][ T3712] Node 0 active_anon:960kB inactive_anon:80632kB active_file:108kB inactive_file:52kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:2328kB dirty:0kB writeback:0kB shmem:5120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB kernel_stack:9872kB pagetables:1160kB all_unreclaimable? no [ 241.299610][ T3712] Node 1 active_anon:28kB inactive_anon:646140kB active_file:0kB inactive_file:76kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:30524kB dirty:0kB writeback:0kB shmem:3116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB kernel_stack:432kB pagetables:1552kB all_unreclaimable? yes [ 241.331048][ T3712] Node 0 DMA free:2484kB boost:0kB min:728kB low:908kB high:1088kB reserved_highatomic:0KB active_anon:0kB inactive_anon:10876kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 241.358320][ T3712] lowmem_reserve[]: 0 439 439 439 439 [ 241.362657][ T3712] Node 0 DMA32 free:21292kB boost:0kB min:21408kB low:26760kB high:32112kB reserved_highatomic:0KB active_anon:960kB inactive_anon:69756kB active_file:0kB inactive_file:76kB unevictable:3072kB writepending:0kB present:1032192kB managed:455044kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 241.423945][ T3712] lowmem_reserve[]: 0 0 0 0 0 [ 241.434916][ T3712] Node 1 DMA32 free:45416kB boost:0kB min:45440kB low:56800kB high:68160kB reserved_highatomic:0KB active_anon:28kB inactive_anon:646140kB active_file:84kB inactive_file:80kB unevictable:3072kB writepending:0kB present:1048436kB managed:954820kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 241.475520][ T3712] lowmem_reserve[]: 0 0 0 0 0 [ 241.478944][ T3712] Node 0 DMA: 79*4kB (UM) 7*8kB (UM) 4*16kB (UM) 12*32kB (UME) 6*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2484kB [ 241.489722][ T3712] Node 0 DMA32: 2157*4kB (UME) 593*8kB (UME) 198*16kB (UME) 94*32kB (UME) 29*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22044kB [ 241.511486][ T3712] Node 1 DMA32: 36*4kB (ME) 28*8kB (UME) 31*16kB (UME) 38*32kB (UME) 15*64kB (UME) 11*128kB (ME) 5*256kB (M) 8*512kB (UM) 3*1024kB (ME) 4*2048kB (UME) 6*4096kB (M) = 45664kB [ 241.531525][ T3712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.542144][ T3712] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.550283][ T3712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.556884][ T3712] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.563160][ T3712] 2102 total pagecache pages [ 241.566158][ T3712] 0 pages in swap cache [ 241.568800][ T3712] Free swap = 0kB [ 241.571222][ T3712] Total swap = 0kB [ 241.574187][ T3712] 524155 pages RAM [ 241.576529][ T3712] 0 pages HighMem/MovableOnly [ 241.579883][ T3712] 167849 pages reserved [ 241.583232][ T3712] 0 pages cma reserved [ 241.589598][ T3712] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=3712,uid=0 [ 241.600994][ T3712] Out of memory (oom_kill_allocating_task): Killed process 3712 (syz-executor.1) total-vm:50620kB, anon-rss:448kB, file-rss:7932kB, shmem-rss:0kB, UID:0 pgtables:56kB oom_score_adj:0 [ 241.951549][ T24] Bluetooth: hci0: command 0x040f tx timeout [ 242.021627][ T24] Bluetooth: hci1: command 0x040f tx timeout [ 242.101873][ T24] Bluetooth: hci3: command 0x040f tx timeout [ 242.350962][ T3121] klogd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 242.365250][ T3121] CPU: 0 PID: 3121 Comm: klogd Not tainted 6.0.0-rc7-syzkaller-00239-gb357fd1c2afc #0 [ 242.371118][ T3121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 242.377623][ T3121] Call Trace: [ 242.380065][ T3121] [ 242.382044][ T3121] dump_stack_lvl+0xcd/0x134 [ 242.385610][ T3121] dump_header+0x10b/0x7f9 [ 242.388650][ T3121] oom_kill_process.cold+0x10/0x15 [ 242.392350][ T3121] out_of_memory+0x11e1/0x14a0 [ 242.397105][ T3121] ? oom_killer_disable+0x270/0x270 [ 242.401087][ T3121] __alloc_pages_slowpath.constprop.0+0x1cb2/0x2300 [ 242.406433][ T3121] ? warn_alloc+0x190/0x190 [ 242.410145][ T3121] ? prepare_alloc_pages+0x178/0x570 [ 242.414731][ T3121] __alloc_pages+0x43d/0x510 [ 242.418605][ T3121] ? __alloc_pages_slowpath.constprop.0+0x2300/0x2300 [ 242.423999][ T3121] ? find_held_lock+0x2d/0x110 [ 242.427975][ T3121] alloc_pages+0x1a6/0x270 [ 242.431521][ T3121] folio_alloc+0x1c/0x70 [ 242.447652][ T3121] filemap_alloc_folio+0x306/0x3a0 [ 242.451597][ T3121] ? xas_load+0x66/0x140 [ 242.455836][ T3121] __filemap_get_folio+0x328/0xed0 [ 242.460244][ T3121] ? filemap_add_folio+0x1d0/0x1d0 [ 242.464234][ T3121] filemap_fault+0x16ad/0x2610 [ 242.467611][ T3121] ? __lock_acquire+0xbc3/0x56d0 [ 242.472785][ T3121] ? __filemap_get_folio+0xed0/0xed0 [ 242.476717][ T3121] __do_fault+0x10d/0x610 [ 242.481970][ T3121] __handle_mm_fault+0x2130/0x39b0 [ 242.489963][ T3121] ? vm_iomap_memory+0x190/0x190 [ 242.495146][ T3121] handle_mm_fault+0x1c8/0x780 [ 242.498878][ T3121] do_user_addr_fault+0x475/0x1210 [ 242.505050][ T3121] exc_page_fault+0x94/0x170 [ 242.509163][ T3121] asm_exc_page_fault+0x22/0x30 [ 242.513381][ T3121] RIP: 0033:0x7fdfdd53f390 [ 242.516984][ T3121] Code: Unable to access opcode bytes at RIP 0x7fdfdd53f366. [ 242.523962][ T3121] RSP: 002b:00007ffe3cf647f8 EFLAGS: 00010202 [ 242.531808][ T3121] RAX: 0000000560957be7 RBX: 00007fdfdd5f163c RCX: 0000000000000007 [ 242.546020][ T3121] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fdfdd5f163d [ 242.552210][ T3121] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000560957be7fa0 [ 242.560541][ T3121] R10: 0000000000004000 R11: 0000000000000246 R12: 00007fdfdd5f1490 [ 242.568700][ T3121] R13: 00007fdfdd5f163d R14: 00007fdfdd5f163d R15: 0000000000000000 [ 242.576784][ T3121] [ 242.587817][ T3121] Mem-Info: [ 242.598648][ T3121] active_anon:247 inactive_anon:181680 isolated_anon:0 [ 242.598648][ T3121] active_file:21 inactive_file:25 isolated_file:0 [ 242.598648][ T3121] unevictable:1536 dirty:0 writeback:0 [ 242.598648][ T3121] slab_reclaimable:15485 slab_unreclaimable:45553 [ 242.598648][ T3121] mapped:8226 shmem:2059 pagetables:666 bounce:0 [ 242.598648][ T3121] kernel_misc_reclaimable:0 [ 242.598648][ T3121] free:17588 free_pcp:98 free_cma:0 [ 242.645683][ T3121] Node 0 active_anon:960kB inactive_anon:80584kB active_file:52kB inactive_file:648kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:2528kB dirty:0kB writeback:0kB shmem:5120kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB kernel_stack:9892kB pagetables:1112kB all_unreclaimable? no [ 242.679716][ T3121] Node 1 active_anon:28kB inactive_anon:645736kB active_file:84kB inactive_file:0kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:22424kB dirty:0kB writeback:0kB shmem:3116kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB kernel_stack:400kB pagetables:1552kB all_unreclaimable? yes [ 242.718209][ T3121] Node 0 DMA free:2484kB boost:0kB min:728kB low:908kB high:1088kB reserved_highatomic:0KB active_anon:0kB inactive_anon:10876kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 242.753660][ T3121] lowmem_reserve[]: 0 439 439 439 439 [ 242.758167][ T3121] Node 0 DMA32 free:20800kB boost:0kB min:21408kB low:26760kB high:32112kB reserved_highatomic:0KB active_anon:960kB inactive_anon:69708kB active_file:528kB inactive_file:0kB unevictable:3072kB writepending:0kB present:1032192kB managed:455044kB mlocked:0kB bounce:0kB free_pcp:1056kB local_pcp:64kB free_cma:0kB [ 242.794609][ T3713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.815278][ T3121] lowmem_reserve[]: 0 0 0 0 0 [ 242.827538][ T3713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.832014][ T3121] Node 1 DMA32 free:55820kB boost:0kB min:45440kB low:56800kB high:68160kB reserved_highatomic:0KB active_anon:28kB inactive_anon:646240kB active_file:1596kB inactive_file:1368kB unevictable:3072kB writepending:0kB present:1048436kB managed:954820kB mlocked:0kB bounce:0kB free_pcp:2160kB local_pcp:820kB free_cma:0kB [ 242.871463][ T3121] lowmem_reserve[]: 0 0 0 0 0 [ 242.876486][ T3121] Node 0 DMA: 77*4kB (UM) 13*8kB (UM) 4*16kB (UM) 12*32kB (UME) 6*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2524kB [ 242.886594][ T3121] Node 0 DMA32: 1801*4kB (UMEH) 643*8kB (UME) 202*16kB (UMEH) 90*32kB (UME) 27*64kB (UM) 12*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21724kB [ 242.922069][ T3121] Node 1 DMA32: 84*4kB (UE) 29*8kB (U) 22*16kB (U) 121*32kB (UME) 124*64kB (UME) 86*128kB (UE) 6*256kB (U) 5*512kB (UM) 3*1024kB (ME) 4*2048kB (UME) 6*4096kB (M) = 63672kB [ 242.936888][ T3121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.948054][ T3121] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.965182][ T3121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.979059][ T3121] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.989941][ T3121] 2585 total pagecache pages [ 242.995597][ T3121] 0 pages in swap cache [ 243.015622][ T3121] Free swap = 0kB [ 243.020431][ T3121] Total swap = 0kB [ 243.030737][ T3121] 524155 pages RAM [ 243.038866][ T3121] 0 pages HighMem/MovableOnly [ 243.047284][ T3121] 167849 pages reserved [ 243.058481][ T3121] 0 pages cma reserved [ 243.088679][ T3121] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=klogd,pid=3121,uid=0 [ 243.122976][ T3121] Out of memory (oom_kill_allocating_task): Killed process 3121 (klogd) total-vm:3756kB, anon-rss:196kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:44kB oom_score_adj:0 [ 243.170272][ T3713] team0: Port device team_slave_0 added [ 243.207841][ T3713] team0: Port device team_slave_1 added [ 243.264525][ T3710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.358866][ T3710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.406065][ T3713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.414817][ T3713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.491516][ T3713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.568914][ T3710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 243.615531][ T3713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.620601][ T3713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.686700][ T3713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.711227][ T3710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.726864][ T3711] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 243.839481][ T3711] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 243.849181][ T3711] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 243.917045][ T3711] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 243.944030][ T3713] device hsr_slave_0 entered promiscuous mode [ 243.954778][ T3713] device hsr_slave_1 entered promiscuous mode [ 243.967387][ T3713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.976023][ T3713] Cannot create hsr debugfs directory [ 244.021653][ T24] Bluetooth: hci0: command 0x0419 tx timeout [ 244.101512][ T24] Bluetooth: hci1: command 0x0419 tx timeout [ 244.181600][ T24] Bluetooth: hci3: command 0x0419 tx timeout [ 244.206734][ T10] device hsr_slave_0 left promiscuous mode [ 244.219718][ T10] device hsr_slave_1 left promiscuous mode [ 244.226981][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.251197][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.273709][ T10] device bridge_slave_1 left promiscuous mode [ 244.286782][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.324521][ T10] device bridge_slave_0 left promiscuous mode [ 244.328708][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.501038][ T10] team0 (unregistering): Port device team_slave_1 removed [ 244.516342][ T10] team0 (unregistering): Port device team_slave_0 removed [ 244.534267][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.549936][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.624964][ T10] bond0 (unregistering): Released all slaves [ 244.819831][ T3710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.896009][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.905688][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.918067][ T3713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 244.926964][ T3710] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.941542][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.949258][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.956888][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.964683][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.973366][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.980716][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.987115][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.992011][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.997219][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.007186][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.013319][ T3713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.034511][ T3713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.044932][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.057361][ T3713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 245.065065][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.070965][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.079065][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.106730][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.112756][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.143261][ T3710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.151129][ T3710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.169961][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.176987][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.184664][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.191890][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.199007][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.215682][ T3711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.250152][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.259498][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.273224][ T3711] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.297324][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.304299][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.315337][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.322564][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.322880][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 245.322891][ T40] audit: type=1400 audit(1664715315.243:97): avc: denied { sys_module } for pid=3710 comm="syz-executor.3" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 245.351153][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.357369][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.369615][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.376920][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.383576][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.394481][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.403581][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.428698][ T3713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.442173][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.450703][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.458161][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.471905][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.479005][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.494767][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.499915][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.508264][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.515973][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.527039][ T3713] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.549861][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.556730][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.562951][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.571215][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.579282][ T3757] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.584294][ T3757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.589981][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.596396][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.604630][ T3757] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.611442][ T3757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.619658][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.626739][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.632799][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 245.641114][ T3710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.659443][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.668018][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.682408][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.697958][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.705255][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.721857][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.729015][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.740065][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.748056][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.759738][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.775234][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.783932][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.791552][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.799520][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.809702][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.833082][ T3710] device veth0_vlan entered promiscuous mode [ 245.842864][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.849958][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.856999][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.862687][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.868612][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.873993][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.886657][ T3710] device veth1_vlan entered promiscuous mode [ 245.899227][ T3711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.925529][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.932206][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.939118][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.945523][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.966108][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.974252][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.983362][ T3710] device veth0_macvtap entered promiscuous mode [ 245.994419][ T3710] device veth1_macvtap entered promiscuous mode [ 246.008721][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.019115][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.027076][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.039745][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.056997][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.066464][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.078630][ T3711] device veth0_vlan entered promiscuous mode [ 246.097435][ T3711] device veth1_vlan entered promiscuous mode [ 246.107818][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.113450][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.119171][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.126811][ T3710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.143019][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.150399][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.158638][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.169556][ T3710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.188363][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.195864][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.210672][ T3710] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.219987][ T3710] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.227834][ T3710] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.236818][ T3710] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.252084][ T3713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.329889][ T3711] device veth0_macvtap entered promiscuous mode [ 246.340179][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.347281][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.356232][ T3711] device veth1_macvtap entered promiscuous mode [ 246.367519][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.375398][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.382374][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.389792][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.420847][ T40] audit: type=1400 audit(1664715316.333:98): avc: denied { mounton } for pid=3710 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 246.440965][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.454149][ T40] audit: type=1400 audit(1664715316.353:99): avc: denied { mount } for pid=3710 comm="syz-executor.3" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 246.454186][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.480378][ T3711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.487858][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.495281][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.501871][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.508769][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 246.515960][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.522317][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.529136][ T3713] device veth0_vlan entered promiscuous mode [ 246.537072][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.546806][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.557163][ T3711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.572455][ T40] audit: type=1400 audit(1664715316.483:100): avc: denied { read write } for pid=3710 comm="syz-executor.3" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.575327][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.592623][ T40] audit: type=1400 audit(1664715316.483:101): avc: denied { open } for pid=3710 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.612401][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:55:16 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x600, &(0x7f0000003d80)=[{&(0x7f0000002b80)=""/88, 0x30}, {&(0x7f0000002c00)=""/4096, 0x428}, {0x0, 0x3}], 0x3}}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000004600)=""/212, 0xd4}], 0x1}}], 0x2, 0x0, 0x0) [ 246.618275][ T40] audit: type=1400 audit(1664715316.483:102): avc: denied { ioctl } for pid=3710 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 246.652916][ T3713] device veth1_vlan entered promiscuous mode [ 246.662468][ T3711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.668628][ T3711] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.677619][ T3711] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.683257][ T3711] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.747766][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.755551][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.764106][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.771174][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.782676][ T3713] device veth0_macvtap entered promiscuous mode [ 246.792198][ T3713] device veth1_macvtap entered promiscuous mode [ 246.808612][ T3713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.815635][ T3713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.823196][ T3713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.830971][ T3713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.842120][ T3713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.852440][ T3713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.862454][ T3713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.865139][ T40] audit: type=1400 audit(1664715316.783:103): avc: denied { create } for pid=3780 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 246.868384][ T3713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.891610][ T3713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.900034][ T3713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.912136][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.917923][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.923847][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 246.929557][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 12:55:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) [ 246.936231][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.944491][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.955407][ T3713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.962998][ T3713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.968625][ T3713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.974374][ T3713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 12:55:17 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) syz_usb_connect$uac1(0x0, 0x7a, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000b40)=@lang_id={0x4}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4}}]}) 12:55:17 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 247.107878][ T40] audit: type=1400 audit(1664715317.023:104): avc: denied { read write } for pid=3787 comm="syz-executor.2" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.133822][ T40] audit: type=1400 audit(1664715317.023:105): avc: denied { open } for pid=3787 comm="syz-executor.2" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.156178][ T40] audit: type=1400 audit(1664715317.023:106): avc: denied { ioctl } for pid=3787 comm="syz-executor.2" path="/dev/raw-gadget" dev="devtmpfs" ino=760 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 247.391700][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 247.414341][ T3757] usb 5-1: new high-speed USB device number 2 using dummy_hcd 12:55:17 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 247.831793][ T3757] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 247.837962][ T3757] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 247.848453][ T3757] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.856768][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 247.943254][ T29] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 247.951108][ T29] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 247.962261][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.042040][ T3757] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.048670][ T3757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.055881][ T3757] usb 5-1: Product: syz [ 248.058924][ T3757] usb 5-1: Manufacturer: syz [ 248.061838][ T3757] usb 5-1: SerialNumber: syz [ 248.132074][ T29] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.139314][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.145366][ T29] usb 7-1: Product: syz [ 248.149116][ T29] usb 7-1: SerialNumber: syz [ 248.382981][ T3757] usb 5-1: 0:2 : does not exist [ 248.405375][ T3757] usb 5-1: USB disconnect, device number 2 [ 248.472550][ T29] usb 7-1: 0:2 : does not exist [ 248.508778][ T29] usb 7-1: USB disconnect, device number 2 [ 249.381899][ T3719] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 251.892589][ T3718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.899893][ T3718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.908097][ T3718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.918563][ T3718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.929026][ T3718] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 251.935962][ T3718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.090211][ T3796] chnl_net:caif_netlink_parms(): no params data found [ 252.195248][ T3796] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.199453][ T3796] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.205551][ T3796] device bridge_slave_0 entered promiscuous mode [ 252.212712][ T3796] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.217411][ T3796] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.224821][ T3796] device bridge_slave_1 entered promiscuous mode [ 252.267970][ T3796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.277226][ T3796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.325297][ T3796] team0: Port device team_slave_0 added [ 252.332486][ T3796] team0: Port device team_slave_1 added [ 252.379320][ T3796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.383498][ T3796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.401633][ T3796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.411699][ T3796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.416832][ T3796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.434070][ T3796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.490160][ T3796] device hsr_slave_0 entered promiscuous mode [ 252.498719][ T3796] device hsr_slave_1 entered promiscuous mode [ 252.675289][ T3796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 252.687130][ T3796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.698413][ T3796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.708879][ T3796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.729858][ T3796] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.735437][ T3796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.742699][ T3796] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.747725][ T3796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.813661][ T3796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.826088][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.834873][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.840237][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.846567][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 252.863159][ T3796] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.873749][ T172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.879103][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.883838][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.909026][ T172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.916284][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.922127][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.939590][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.947498][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.961256][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.987696][ T3796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.995146][ T3796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.004429][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.010484][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.017310][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.134102][ T3796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.143713][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.150395][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.177567][ T172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.185516][ T172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.212357][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.218546][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 253.225433][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 253.231196][ T3756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 253.239627][ T3796] device veth0_vlan entered promiscuous mode [ 253.253237][ T3796] device veth1_vlan entered promiscuous mode [ 253.278954][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 253.285404][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 253.290908][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.297654][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.308828][ T3796] device veth0_macvtap entered promiscuous mode [ 253.318020][ T3796] device veth1_macvtap entered promiscuous mode [ 253.336987][ T3796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.344488][ T3796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.351276][ T3796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.360319][ T3796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.367156][ T3796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.374397][ T3796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.382506][ T3796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.387823][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.393186][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.399384][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.405191][ T1951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.414805][ T3796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.422307][ T3796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.429051][ T3796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.436867][ T3796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.444198][ T3796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.451608][ T3796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.463544][ T3796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.470720][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.478259][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.487434][ T3796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.493745][ T3796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.498807][ T3796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.504703][ T3796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.575998][ T40] audit: type=1400 audit(1664715323.493:107): avc: denied { create } for pid=3808 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 12:55:23 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:23 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) 12:55:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0xa, &(0x7f0000000580)=[{&(0x7f0000000080)="fc42b0e2630ceda76d0d90b1b991add4f58a83ed663715020bf2e0c66195f7fdc1e73db521be47c788b3e36a8610eec5a3ed5ddc26b960b3028763bc85d10c174e081536a31b2fa7bd8acf28600e33e01c366d639f30a9dd14e35eaa565e138640e26f6907cf69ace1e337f3b98fcb81bb6774dc3d247086c11332", 0x7b}, {&(0x7f0000000100)="b04f0b7f4a6ddbc70145f14c075707f7519a665f143496c7e0c524fdc76a9519a438c008ff18", 0x26}, {0x0}], 0x3}, 0x0) 12:55:23 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 253.593807][ T40] audit: type=1400 audit(1664715323.493:108): avc: denied { bind } for pid=3808 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 12:55:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x401, 0xe00, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) 12:55:23 executing program 0: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x24048010) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@loopback}, &(0x7f0000000380)=0x14) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000003c0), 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000400)={"dda0a1b4702e4953729070828b2dc327", 0x0, 0x0, {0x1, 0xc77d}, {0x0, 0x2}, 0x3, [0x3, 0x0, 0x1f, 0x1, 0x800, 0x0, 0x4, 0x1, 0xe2fd, 0xdc, 0xffffffffffffff88, 0x53, 0x0, 0xffffffff, 0x8]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000004c0)=r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004081}, 0x880) write$nbd(r0, &(0x7f0000000640)={0x67446698, 0x0, 0x0, 0x0, 0x3, "a326c50836ede6343250848f8d5e67c6fbb21cd498fa464d9202b58bab0de1576e88221ce3e31f4a73b01901a27357e96c43308ed9ad878a115e2f41854ee4b3d46b4182ba30d3aae48273726ed45089285bd1b44996b4c6ebf46eb4e8d5494a15383ee040979ae231c6565236b177501aabaa1789de70b25c8bd3d59f75c131bfeae96bddd7745f415cad583693099fd8f193d51744773ad4fee7ff21d21ad9eac1a4514a2cfd"}, 0xb7) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xdf}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x3212f05f62816de1) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000840)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000880)) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f00000008c0)) syz_usb_connect$uac1(0x5, 0xb2, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x9, 0x10, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0x9d}, [@extension_unit={0x7, 0x24, 0x8, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfffa, 0x200, 0x2, "d702d1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xc6, 0x6, 0x6, {0x7, 0x25, 0x1, 0x0, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x3}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x5, 0x1, 0x2, '\r\r-'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x557, 0x0, 0x0, "a462c31e69"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x4, 0xe0, 0x8, "01b0c6b486"}]}, {{0x9, 0x5, 0x82, 0x9, 0x30, 0x20, 0x3, 0x51, {0x7, 0x25, 0x1, 0x0, 0x4, 0xfbff}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310, 0x5, 0x40, 0x0, 0x40, 0x2}, 0x111, &(0x7f0000000a00)={0x5, 0xf, 0x111, 0x3, [@generic={0xa0, 0x10, 0xa, "2ed40ffe9524e8e48cc289b27db6dd92c0fa60c71b58435d16748273e6c48a06435bb11fd7c1585b4bc69006c1c7ae39d4d40902c2f8ee01923ca999b4ac9909c2bb77ffd5fd1264509a7ddf1a0011940310633ef9e8c1b5204d9a9dc0c3ace25a0bfa54601872eb91e3e54faa2858afa6600f4bdc6e14b5abaa20f14de8601bd4cbf4bb3c76326224f9500c2c6aff07041e5ede8b866767607785938c"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x101, 0xf00f, 0x2, [0x7]}, @generic={0x5c, 0x10, 0x2, "a778354fe10d01b706abfe946073ebc26a14f4544626cbce6611df2c24f73d0ce9b914e0808ac3ceef558821c672b400b679e1e9a1fdfd5cafe6d88f92c4fce2fd32c417dac6ae6ad4b5824ab2beb1723fbd57a2c8bd0a1a21"}]}, 0x7, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x3009}}, {0xae, &(0x7f0000000c00)=@string={0xae, 0x3, "dff8588336af8bf96de128b5210702d63d966b150fa5527b90aa5e6c2297b12216e324cd901342c9df4a89df7df0cf559aa12312d8327225456efb8692e1810f919a29c92ba5c58a6fbf57c924ea32aa68c31a5841857032abddbd1520951fd76e00012806d2b61afe167525967765ddeb8c4f20248ffb90250ba7523d41cec471b0fe49c943f348c87c98274fde24cf262cde27d184b08d355e2f36c1dce0947a2f1938c560d908aa0dc1b2"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x458}}, {0x31, &(0x7f0000000d00)=@string={0x31, 0x3, "44fb6969f43b6f534a3580992da1373213085638e87af8bafdcc74d1dbd5b29cc9b3ac43d21406cfeb9f3ee90c9d2c"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x3404}}]}) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000e80)={'pim6reg0', 0x32, 0x7f}, 0xb) 12:55:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x2, 0x6, 0x401, 0xe00, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) [ 253.646548][ T40] audit: type=1400 audit(1664715323.563:109): avc: denied { create } for pid=3818 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.661082][ T40] audit: type=1400 audit(1664715323.563:110): avc: denied { write } for pid=3818 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.676375][ T40] audit: type=1400 audit(1664715323.573:111): avc: denied { bpf } for pid=3820 comm="syz-executor.0" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 12:55:23 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) 12:55:23 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002b80)=""/88, 0x58}], 0x1}}], 0x1, 0x0, 0x0) [ 253.891594][ T3757] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 253.911571][ T1951] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 253.941939][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 254.031912][ T3756] Bluetooth: hci2: command 0x0409 tx timeout [ 254.251861][ T3757] usb 7-1: unable to get BOS descriptor or descriptor too short [ 254.311819][ T3757] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 254.319253][ T3757] usb 7-1: can't read configurations, error -71 [ 254.333010][ T1951] usb 8-1: unable to get BOS descriptor or descriptor too short [ 254.413312][ T1951] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 254.419072][ T1951] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 254.425972][ T1951] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.441556][ T34] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 254.449890][ T34] usb 5-1: config 1 has no interface number 1 [ 254.455494][ T34] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 254.463564][ T34] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 32, changing to 7 [ 254.601820][ T1951] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.608966][ T1951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.615785][ T1951] usb 8-1: Product: syz [ 254.619092][ T1951] usb 8-1: Manufacturer: syz [ 254.622685][ T1951] usb 8-1: SerialNumber: syz [ 254.645196][ T34] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.653592][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.664034][ T34] usb 5-1: Product: 〉 [ 254.667971][ T34] usb 5-1: Manufacturer: Ц [ 254.671733][ T34] usb 5-1: SerialNumber: 荘꼶曆딨ܡ혂阽ᕫꔏ筒ꪐ汞霢⊱촤᎐쥂䫟嗏ꆚሣ㋘╲湅蛻ཱྀ骑줩ꔫ諅뽯쥗ꨲ써堚蕁㉰ᖽ锠휟n⠁툆᪶᛾╵瞖賫⁏輤郻ଥ劧䄽쓎끱䧾䏉䣳糈➘켤Ⱖ⟞蓑趰帵㘯铠⽺㠙情ࣙඪ닁 [ 254.951953][ T1951] usb 8-1: 0:2 : does not exist [ 254.964588][ T1951] usb 8-1: USB disconnect, device number 2 [ 254.979875][ T3750] udevd[3750]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.104868][ T34] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 255.112498][ T34] usb 5-1: found format II with max.bitrate = 5, frame size=1 [ 255.118843][ T34] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 255.166745][ T34] usb 5-1: USB disconnect, device number 3 [ 255.191292][ T3750] udevd[3750]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 12:55:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 12:55:25 executing program 1: syz_open_dev$mouse(0x0, 0x0, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 12:55:25 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000840)=""/235) 12:55:25 executing program 2: mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000840)=""/235) 12:55:25 executing program 0: syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) 12:55:25 executing program 1: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000006c0), &(0x7f0000000700)={'enc=', 'pkcs1', ' hash=', {'sha384\x00'}}, 0x0, 0x0) 12:55:25 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0xb, 0x0, 0x0, 0x0}, 0x20) 12:55:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001b40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b00)={&(0x7f00000018c0)={0x14}, 0x14}}, 0x0) 12:55:25 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 12:55:25 executing program 0: bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0}, 0x20) 12:55:25 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf4240, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:25 executing program 2: r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x22}, 0x0) [ 255.526922][ T40] audit: type=1400 audit(1664715325.443:112): avc: denied { read } for pid=3846 comm="syz-executor.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 12:55:25 executing program 0: syz_clone(0x7a0c3000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:55:25 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) [ 255.549497][ T3847] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 255.554199][ T40] audit: type=1400 audit(1664715325.443:113): avc: denied { open } for pid=3846 comm="syz-executor.3" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.588120][ T40] audit: type=1400 audit(1664715325.443:114): avc: denied { ioctl } for pid=3846 comm="syz-executor.3" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.607915][ T40] audit: type=1400 audit(1664715325.443:115): avc: denied { prog_load } for pid=3848 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 255.627439][ T40] audit: type=1400 audit(1664715325.503:116): avc: denied { sys_admin } for pid=3854 comm="syz-executor.0" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 12:55:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_getvlan={0x18}, 0x18}}, 0x0) 12:55:25 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) 12:55:25 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000010000000000000e006000029"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) [ 256.101636][ T3757] Bluetooth: hci2: command 0x041b tx timeout 12:55:26 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa0100000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:55:26 executing program 2: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) 12:55:26 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x222642, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 12:55:26 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x0) 12:55:26 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2f0c42, 0x0) 12:55:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 12:55:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 12:55:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x0, 0x0, 0x3d}, 0x48) 12:55:26 executing program 2: syz_open_dev$usbfs(&(0x7f0000000240), 0x1ff, 0x0) 12:55:26 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 12:55:26 executing program 0: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 12:55:26 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) 12:55:26 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf4240, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:26 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x113, r0, 0x10000000) 12:55:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x3, &(0x7f0000000740)=@raw=[@map_val, @alu], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:26 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @broadcast, @void, {@mpls_uc={0x8035, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 12:55:26 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 12:55:26 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000008c80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) 12:55:26 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 256.841646][ T3757] usb 5-1: new high-speed USB device number 4 using dummy_hcd 12:55:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xc, 0x0, 0x0) 12:55:26 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 12:55:26 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) 12:55:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) 12:55:26 executing program 3: socket(0xa, 0x1, 0x7ff) [ 257.211791][ T3757] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 257.217983][ T3757] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 257.226750][ T3757] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.472376][ T3757] usb 5-1: string descriptor 0 read error: -22 [ 257.476972][ T3757] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.482917][ T3757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.535249][ T3757] usb 5-1: 0:2 : does not exist [ 257.735813][ T1951] usb 5-1: USB disconnect, device number 4 [ 258.181922][ T3757] Bluetooth: hci2: command 0x040f tx timeout 12:55:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, 0x0) 12:55:28 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 12:55:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 12:55:28 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000012c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "12"}}, 0x119) 12:55:28 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 12:55:28 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 12:55:28 executing program 0: pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f0000000080), 0x0) 12:55:28 executing program 3: openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) 12:55:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x4, &(0x7f0000000740)=@raw=[@ldst, @call, @map_val], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 258.298384][ T3757] hid-generic 0000:0000:0000.0002: item fetching failed at offset 0/1 [ 258.308563][ T3757] hid-generic: probe of 0000:0000:0000.0002 failed with error -22 12:55:28 executing program 0: socket(0x0, 0x921c5db5ffe9043c, 0x0) 12:55:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x18}, 0x48) 12:55:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x14, 0x1, 0x2, 0x401}, 0x14}}, 0x0) 12:55:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) 12:55:28 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/boot_params', 0x200000, 0x0) 12:55:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:28 executing program 3: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_delneigh={0x5c, 0x1d, 0x4, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x20, 0x8c, 0x1}, [@NDA_IFINDEX={0x8}, @NDA_LLADDR={0xa, 0x2, @random="c71898690f33"}, @NDA_MASTER={0x8, 0x9, 0x9}, @NDA_VLAN={0x6, 0x5, 0x3}, @NDA_FLAGS_EXT={0x8}, @NDA_CACHEINFO={0x14, 0x3, {0xfffffffe, 0x6, 0x1d75000, 0xffffffff}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x64) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xb, 0x1, 'vxcan0\x00'}]}, 0x20}}, 0x4000810) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) 12:55:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'netdevsim0\x00', 0x200}) 12:55:28 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 12:55:28 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xa8a4fbc1e9865c9e, 0x0, 0x0}, 0x20) 12:55:28 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, 0x0, 0x0, r0) 12:55:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, 0x0, 0x0) 12:55:28 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x310}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 12:55:28 executing program 2: socketpair(0x11, 0x0, 0x0, &(0x7f00000002c0)) 12:55:28 executing program 1: mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/179) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 12:55:28 executing program 0: syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 12:55:28 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x3, 0x0) 12:55:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000006, 0x13, r0, 0x0) 12:55:28 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dm_verity', 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) 12:55:28 executing program 0: socketpair(0x28, 0x0, 0x101, &(0x7f0000000000)) [ 258.751903][ T3670] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 259.183641][ T3670] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 259.189944][ T3670] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 259.196680][ T3670] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.451684][ T3670] usb 8-1: string descriptor 0 read error: -22 [ 259.457303][ T3670] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.464569][ T3670] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.537200][ T3670] usb 8-1: 0:2 : does not exist [ 259.738907][ T3670] usb 8-1: USB disconnect, device number 3 12:55:30 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0200000000922b"], 0x10}}, 0x0) 12:55:30 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xa40, 0x0) 12:55:30 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dm_verity', 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) 12:55:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x3, &(0x7f0000000740)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x2}, @alu], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 260.262109][ T40] kauditd_printk_skb: 24 callbacks suppressed 12:55:30 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dm_verity', 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) [ 260.262125][ T40] audit: type=1400 audit(1664715330.183:141): avc: denied { create } for pid=3982 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 260.262401][ T172] Bluetooth: hci2: command 0x0419 tx timeout [ 260.269833][ T40] audit: type=1400 audit(1664715330.183:142): avc: denied { write } for pid=3982 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 12:55:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x240448d0) 12:55:30 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dm_verity', 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) 12:55:30 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf0ff7f00000000}}, 0x0) 12:55:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f00000001c0), 0x0}, 0x20) 12:55:30 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 12:55:30 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}}}]}}, 0x0) 12:55:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000002c0), 0x4) 12:55:30 executing program 3: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x15) 12:55:30 executing program 0: syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x8400) 12:55:30 executing program 3: pipe2(&(0x7f0000000180), 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000500), 0x0) 12:55:30 executing program 2: syz_clone(0x32001080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 260.401605][ T40] audit: type=1400 audit(1664715330.313:143): avc: denied { setopt } for pid=4000 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 12:55:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x1, &(0x7f0000000740)=@raw=[@ldst], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001800), 0x10}, 0x80) [ 260.445666][ T40] audit: type=1400 audit(1664715330.363:144): avc: denied { append } for pid=4013 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 12:55:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) [ 260.681766][ T6] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 261.041806][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 261.049490][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 261.056905][ T6] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 261.062803][ T6] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 261.233530][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.241859][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.248680][ T6] usb 6-1: Product: syz [ 261.252284][ T6] usb 6-1: Manufacturer: syz [ 261.256344][ T6] usb 6-1: SerialNumber: syz [ 261.292079][ T4007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 261.561863][ T6] cdc_ncm 6-1:1.0: bind() failure [ 261.570149][ T6] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 261.575260][ T6] cdc_ncm 6-1:1.1: bind() failure [ 261.585996][ T6] usb 6-1: USB disconnect, device number 2 [ 261.624124][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.629986][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 12:55:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$'], 0x30}}, 0x0) 12:55:31 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0}, 0x20) 12:55:31 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:31 executing program 0: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) syz_open_dev$usbfs(&(0x7f0000000000), 0x71a, 0x0) 12:55:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0xc4c}, 0x48) 12:55:31 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:31 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000480), 0x4) 12:55:31 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39"}}) 12:55:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) 12:55:32 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000001480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 12:55:32 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 12:55:32 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000012c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00'}}, 0x118) 12:55:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x1000}, 0x48) 12:55:32 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fstat(r0, &(0x7f0000000040)) 12:55:32 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) 12:55:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x668, 0x1e0, 0x0, 0x0, 0x4b0, 0x2d8, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@uncond, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @private, 0x0, 0x0, 'veth0_virt_wifi\x00', 'vlan1\x00', {}, {}, 0x1d}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0xc0]}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x48000, 0x0, @local, 0x4e22}}}, {{@ip={@remote, @local, 0x0, 0x0, 'pimreg0\x00', 'team_slave_0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'vlan0\x00', 'batadv0\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "5ac5"}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6c8) 12:55:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) [ 262.159331][ T4048] x_tables: duplicate underflow at hook 1 [ 262.411563][ T51] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 262.651541][ T51] usb 7-1: Using ep0 maxpacket: 16 [ 262.771650][ T51] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 262.779436][ T51] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 262.788908][ T51] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.952216][ T51] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.958938][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.964527][ T51] usb 7-1: Product: syz [ 262.967449][ T51] usb 7-1: Manufacturer: syz [ 262.970597][ T51] usb 7-1: SerialNumber: syz [ 263.291685][ T51] usb 7-1: 0:2 : does not exist [ 263.300513][ T51] usb 7-1: USB disconnect, device number 5 [ 263.327321][ T3750] udevd[3750]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 12:55:33 executing program 2: setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) 12:55:33 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x80) 12:55:33 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000010000000000000e00600001822"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0xe99f, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 12:55:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 12:55:33 executing program 3: mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x26) 12:55:33 executing program 1: setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) 12:55:33 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='block_bio_remap\x00'}, 0x10) 12:55:33 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0xc0, 0x0) 12:55:33 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$PIO_FONT(r0, 0x4b61, 0x0) 12:55:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x14, 0x0, 0x0) 12:55:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x71a, 0x2440) 12:55:33 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}}}}]}}, 0x0) 12:55:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) [ 263.819309][ T40] audit: type=1400 audit(1664715333.733:145): avc: denied { append } for pid=4073 comm="syz-executor.0" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 12:55:33 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @broadcast, @void, {@mpls_uc={0x8906, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 12:55:33 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0}) 12:55:33 executing program 0: mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x821e46478e1d56fe, 0xffffffffffffffff, 0x0) 12:55:33 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3eb, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:33 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:33 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x71a, 0x2440) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 264.132175][ T172] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 264.541638][ T172] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.549755][ T172] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 264.558076][ T172] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 264.565039][ T172] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 264.761954][ T172] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.769825][ T172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.774899][ T172] usb 6-1: Product: syz [ 264.777520][ T172] usb 6-1: Manufacturer: syz [ 264.780608][ T172] usb 6-1: SerialNumber: syz [ 264.812176][ T4083] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 265.071796][ T172] cdc_ncm 6-1:1.0: bind() failure [ 265.081827][ T172] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 265.088578][ T172] cdc_ncm 6-1:1.1: bind() failure [ 265.102465][ T172] usb 6-1: USB disconnect, device number 3 12:55:35 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x10002, 0x0) 12:55:35 executing program 3: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd) 12:55:35 executing program 0: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x6}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 12:55:35 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 12:55:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000008c40)={0x1f, 0x0, 0x4}, 0x6) 12:55:35 executing program 0: syz_clone(0x72946480, 0x0, 0x0, 0x0, 0x0, 0x0) 12:55:35 executing program 1: bpf$PROG_LOAD_XDP(0xa, &(0x7f0000000340)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x188e}, 0x48) [ 265.598481][ T40] audit: type=1400 audit(1664715335.513:146): avc: denied { bind } for pid=4102 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 12:55:35 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x10000000) 12:55:35 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x10, 0x0, 0x0, 0x0}, 0x20) 12:55:35 executing program 3: epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000140), 0x53) [ 265.862151][ T3670] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 266.121574][ T3670] usb 7-1: Using ep0 maxpacket: 32 [ 266.241937][ T3670] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.252276][ T3670] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.261668][ T3670] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.268582][ T3670] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 266.274810][ T3670] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 266.282158][ T3670] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 266.451861][ T3670] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.457414][ T3670] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.463419][ T3670] usb 7-1: Product: syz [ 266.467496][ T3670] usb 7-1: Manufacturer: syz [ 266.470911][ T3670] usb 7-1: SerialNumber: syz [ 266.742346][ T3670] cdc_ncm 7-1:1.0: bind() failure [ 266.753556][ T3670] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 266.759810][ T3670] cdc_ncm 7-1:1.1: bind() failure [ 266.781926][ T3670] usb 7-1: USB disconnect, device number 6 12:55:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) 12:55:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 12:55:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) 12:55:37 executing program 0: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x6}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x80]}, 0x8}) 12:55:37 executing program 1: stat(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) 12:55:37 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000001840), 0xa) [ 267.271881][ T4126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4126 comm=syz-executor.2 12:55:37 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 12:55:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 12:55:37 executing program 2: add_key$keyring(&(0x7f0000001fc0), &(0x7f0000002000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) 12:55:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, 0x48) 12:55:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 12:55:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_delneigh={0x1c}, 0x1c}}, 0x0) 12:55:37 executing program 3: socketpair(0x29, 0x0, 0x0, &(0x7f00000006c0)) 12:55:37 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 12:55:37 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing', 0x0, 0x0) [ 267.343916][ T40] audit: type=1400 audit(1664715337.263:147): avc: denied { create } for pid=4141 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 12:55:37 executing program 0: syz_emit_ethernet(0x19, &(0x7f0000000040)={@broadcast, @dev, @val, {@llc_tr={0x11, {@llc={0x0, 0x0, "9b"}}}}}, 0x0) 12:55:37 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000140)=""/201, 0x7ffff000) 12:55:37 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @func, @initr0], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x82, &(0x7f00000000c0)=""/130, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0x0, 0x100}, 0x10}, 0x80) 12:55:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, 0x0, 0x0) [ 267.376558][ T40] audit: type=1400 audit(1664715337.283:148): avc: denied { read } for pid=4146 comm="syz-executor.2" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 12:55:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x17, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:37 executing program 1: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) [ 267.398583][ T40] audit: type=1400 audit(1664715337.283:149): avc: denied { open } for pid=4146 comm="syz-executor.2" path="/sys/kernel/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 12:55:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xb, 0x0, 0x0) 12:55:37 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000140)=""/201, 0x7ffff000) 12:55:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x13, 0x0, 0x0) 12:55:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x40142, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) 12:55:37 executing program 0: syz_clone(0x116021480, 0x0, 0xffffffffffffffc3, 0x0, 0x0, 0x0) 12:55:37 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0xde, &(0x7f00000000c0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:37 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000140)=""/201, 0x7ffff000) 12:55:37 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000040)=@framed={{}, [@map_idx_val, @initr0, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0xeb, 0xde, &(0x7f00000000c0)=""/222, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:37 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000200), 0x0) 12:55:37 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000140)=""/201, 0x7ffff000) 12:55:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x64}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) 12:55:37 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000040)=@raw=[@map_idx], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0x800, 0x100}, 0x10}, 0x80) 12:55:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0xc4c, 0xffffffffffffffff, 0x401}, 0x48) 12:55:37 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="cc81a7fba62d600095366ae1fbbbba6cb50922a5b501c65063d586ab85"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:37 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x18f000, 0x0) 12:55:37 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:37 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/spurious', 0x28040, 0x0) 12:55:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x80) 12:55:37 executing program 1: syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0xb3, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x7ef}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x20}}]}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter, 0x48) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 12:55:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x20}) 12:55:37 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 12:55:37 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='@&$)%+,-$[\x00') 12:55:37 executing program 2: syz_open_dev$mouse(&(0x7f0000000000), 0xffffffffffffffff, 0x20c000) 12:55:37 executing program 3: r0 = epoll_create(0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000001}) 12:55:37 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x202101, 0x0) read$FUSE(r0, 0x0, 0x0) [ 267.647057][ T40] audit: type=1400 audit(1664715337.563:150): avc: denied { block_suspend } for pid=4207 comm="syz-executor.3" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 12:55:37 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000040)=@raw=[@map_idx], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0x800, 0x100}, 0x10}, 0x80) [ 267.861625][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 267.882590][ T172] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 268.102236][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 268.122221][ T172] usb 5-1: Using ep0 maxpacket: 32 [ 268.231844][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 268.281615][ T172] usb 5-1: unable to get BOS descriptor or descriptor too short [ 268.362015][ T172] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.369238][ T172] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.375898][ T172] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 268.382190][ T172] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 268.388417][ T172] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.395635][ T172] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 268.411910][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 268.417815][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.424156][ T29] usb 6-1: Product: syz [ 268.427378][ T29] usb 6-1: Manufacturer: syz [ 268.430922][ T29] usb 6-1: SerialNumber: syz [ 268.451917][ T4196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 268.563032][ T172] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.568955][ T172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.575065][ T172] usb 5-1: Product: syz [ 268.578206][ T172] usb 5-1: Manufacturer: syz [ 268.581969][ T172] usb 5-1: SerialNumber: syz [ 268.676765][ T29] usb 6-1: USB disconnect, device number 4 [ 268.861629][ T172] cdc_ncm 5-1:1.0: bind() failure [ 268.874227][ T172] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 268.879694][ T172] cdc_ncm 5-1:1.1: bind() failure [ 268.890043][ T172] usb 5-1: USB disconnect, device number 5 12:55:39 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000001c0)) 12:55:39 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x2, @remote}}, 0x1e) [ 269.197498][ T40] audit: type=1400 audit(1664715339.113:151): avc: denied { bind } for pid=4216 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 12:55:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{0x0}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:39 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) 12:55:39 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x7, &(0x7f0000000040)=@raw=[@map_idx, @func, @initr0, @map_idx_val], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x82, &(0x7f00000000c0)=""/130, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:39 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) signalfd(r0, &(0x7f0000000000), 0x8) 12:55:39 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x3, 0x0) 12:55:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) 12:55:39 executing program 3: syz_open_dev$usbmon(&(0x7f00000000c0), 0x5, 0x86000) 12:55:39 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/suspend_stats', 0x127800, 0x0) 12:55:39 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0x0) 12:55:39 executing program 2: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x60004080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:39 executing program 1: process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f00000003c0)=""/207, 0xcf}], 0x2, 0x0) 12:55:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @local, {[@timestamp_addr={0x44, 0x4}]}}}}}) 12:55:39 executing program 3: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x60004080, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)="15") openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:39 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=0x1, 0xffffffffffffffff, 0x15}, 0x10) 12:55:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter, 0x48) 12:55:39 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) 12:55:39 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) 12:55:39 executing program 2: pipe2(&(0x7f0000000180), 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) 12:55:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:39 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:39 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/hid_logitech_hidpp', 0x0, 0x0) 12:55:39 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) 12:55:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:39 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$tun(r0, 0x0, 0x0) 12:55:39 executing program 1: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x32, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, {{0x10}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:39 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x32, 0xffffffffffffffff, 0x8000000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 12:55:39 executing program 2: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000040)={'sit0\x00', 0x0}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000e80)) 12:55:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x7, &(0x7f0000000740)=@raw=[@ldst={0x3, 0x3, 0x0, 0x2, 0x6, 0xfffffffffffffffc, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x2e}, @map_val={0x18, 0xa}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @alu={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffc0, 0xfffffffffffffffc}], &(0x7f0000000780)='syzkaller\x00', 0x3c, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001800)={0x2, 0x5, 0x200, 0x3}, 0x10}, 0x80) 12:55:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000100000061a18000fc"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39", [0x100]}}) 12:55:39 executing program 0: r0 = epoll_create(0x3) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0x10000000}) 12:55:39 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 12:55:39 executing program 2: socketpair(0x18, 0x0, 0x80000001, &(0x7f0000000000)) 12:55:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39", [0x100]}}) 12:55:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 12:55:39 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="cc81a7fba62d600095366ae1fbbbba6cb50922a5b501c65064d586ab85162aea69e7debfee"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:39 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @loopback}}}}}, 0x0) [ 269.919438][ T4295] Zero length message leads to an empty skb 12:55:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39", [0x100]}}) 12:55:39 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) read$FUSE(r0, &(0x7f00000026c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getregset(0x4204, r1, 0x0, 0x0) 12:55:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x3}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39", [0x100]}}) 12:55:39 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000008bc0)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008c00)) 12:55:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) 12:55:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f00000003c0)) 12:55:39 executing program 0: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr=0x64010101, @loopback}}}}}, 0x0) 12:55:39 executing program 1: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)) 12:55:39 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) finit_module(r0, 0x0, 0x0) 12:55:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f, 0x4}, 0x48) 12:55:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x0) 12:55:39 executing program 0: select(0x40, &(0x7f0000000500), 0x0, 0x0, 0x0) 12:55:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x4, &(0x7f0000000740)=@raw=[@ldst, @call, @map_val], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:39 executing program 2: sched_setscheduler(0x0, 0x0, &(0x7f00000011c0)=0x3f) 12:55:40 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000040)=@raw=[@initr0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:40 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, 0x0) 12:55:40 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0xd, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:40 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:40 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1ffff000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x2}, 0x0) 12:55:40 executing program 2: syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @broadcast, @void, {@mpls_uc={0x806, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 12:55:40 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/fd1', 0x10000, 0x0) 12:55:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) 12:55:40 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xprtrdma_createmrs\x00'}, 0x10) 12:55:40 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf4240, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:40 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x0, 0x0) syz_open_pts(r0, 0x0) 12:55:40 executing program 0: syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x200) [ 270.993114][ T40] audit: type=1400 audit(1664715340.913:152): avc: denied { write } for pid=4355 comm="syz-executor.0" name="mouse0" dev="devtmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 12:55:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x0, 0x8}, 0x48) 12:55:40 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x400) 12:55:40 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000d45000/0x2000)=nil, &(0x7f0000928000/0x3000)=nil, &(0x7f00007d2000/0x3000)=nil, &(0x7f0000665000/0x1000)=nil, &(0x7f0000ec6000/0x4000)=nil, &(0x7f0000861000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x0}, 0x68) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x7fffdf002000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:40 executing program 1: getresuid(&(0x7f00000004c0), 0x0, 0x0) 12:55:41 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) 12:55:41 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)}, 0x80) 12:55:41 executing program 2: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x77359400}) 12:55:41 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b80)='ns/cgroup\x00') 12:55:41 executing program 0: pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 12:55:41 executing program 3: pselect6(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x80]}, 0x8}) 12:55:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) 12:55:41 executing program 0: stat(&(0x7f0000000080)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[]) 12:55:41 executing program 3: socket$inet6(0xa, 0x801, 0x7f) 12:55:41 executing program 1: openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:55:41 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000004680), 0xffffffffffffffff) 12:55:41 executing program 0: prlimit64(0x0, 0x0, &(0x7f00000001c0), 0x0) 12:55:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x300}, 0x0) 12:55:41 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfffffffe}, 0x8) 12:55:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000018c0)={0x14}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x34}}, 0x0) 12:55:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0xf}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:41 executing program 2: getresgid(&(0x7f0000000100), 0x0, 0x0) 12:55:41 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001040)=0x10, 0x4) 12:55:41 executing program 3: mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 12:55:41 executing program 0: openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000012c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x50000, 0x0, "12"}}, 0x119) [ 272.027605][ T40] audit: type=1400 audit(1664715341.943:153): avc: denied { create } for pid=4401 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 12:55:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="8a", 0x1, r0) 12:55:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000200)={0xfffffffffffffffd, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) [ 272.061961][ T972] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/1 12:55:41 executing program 2: sched_setscheduler(0x0, 0x0, &(0x7f00000011c0)) [ 272.062503][ T40] audit: type=1400 audit(1664715341.953:154): avc: denied { setopt } for pid=4401 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 272.071013][ T972] hid-generic: probe of 0000:0000:0000.0003 failed with error -22 12:55:42 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0}, 0x20) 12:55:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast2}}}}) 12:55:42 executing program 3: sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x4007, 0x3f}, 0x48) 12:55:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM(0xe, 0x0, 0x0) 12:55:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000fdd47b"], 0x58}}, 0x0) 12:55:42 executing program 1: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) 12:55:42 executing program 2: sched_setattr(0x0, 0x0, 0x0) 12:55:42 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) syz_clone(0x2c300000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:55:42 executing program 3: pipe2(0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 12:55:42 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0}, 0x20) 12:55:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0xf}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:42 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42c2, 0x0) 12:55:42 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10b040, 0x0) [ 272.246229][ T40] audit: type=1800 audit(1664715342.163:155): pid=4439 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1158 res=0 errno=0 12:55:42 executing program 2: mlock2(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000b97000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:42 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) dup2(r0, r1) 12:55:42 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0xd5, &(0x7f0000000080)=""/213, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:42 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, 0x0) 12:55:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0xb}}, 0x0) 12:55:42 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x230702, 0x0) 12:55:42 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, 0x0) 12:55:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:42 executing program 3: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002040), 0x0, 0x0, 0x0) 12:55:42 executing program 2: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @loopback}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 12:55:42 executing program 3: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x32, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000012c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) 12:55:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000001080)) 12:55:42 executing program 1: syz_clone(0x3c320400, 0x0, 0x0, 0x0, 0x0, 0x0) 12:55:42 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0xf4240, &(0x7f0000000740)=@raw=[@map_val, @alu], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:42 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/fd1', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 12:55:42 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, {{0x10}, {0x2f030000}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:42 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000010000000000000e006000018"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000018c0)={0x14}, 0x14}}, 0x0) 12:55:42 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="cc81a7fba62d600095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:42 executing program 3: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x8001}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:55:42 executing program 1: syz_emit_ethernet(0x11, &(0x7f0000001a40)={@multicast, @empty, @void, {@x25}}, 0x0) 12:55:42 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000001540)=ANY=[@ANYBLOB="cc81a7fba66d600095366ae1fbbbba6cb50922a5b501c65064d586ab856f4434dbaf81bd6d"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:42 executing program 2: syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x20}}]}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:55:42 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) 12:55:42 executing program 3: stat(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 12:55:42 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x100000e) 12:55:42 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000500)='logon\x00', 0x0, 0x0, 0x0, r0) [ 272.540723][ T40] audit: type=1400 audit(1664715342.453:156): avc: denied { append } for pid=4491 comm="syz-executor.0" name="pfkey" dev="proc" ino=4026533397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 12:55:42 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x100000e) 12:55:42 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) 12:55:42 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000008c80)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) [ 272.791736][ T3803] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 273.031578][ T3803] usb 7-1: Using ep0 maxpacket: 16 [ 273.151772][ T3803] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 273.331911][ T3803] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 273.338199][ T3803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.345688][ T3803] usb 7-1: Product: syz [ 273.350005][ T3803] usb 7-1: Manufacturer: syz [ 273.357403][ T3803] usb 7-1: SerialNumber: syz [ 273.606393][ T3670] usb 7-1: USB disconnect, device number 7 12:55:44 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x8000000) 12:55:44 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x2, &(0x7f0000000740)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0}], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:44 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x100000e) 12:55:44 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) 12:55:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) [ 274.129377][ T40] audit: type=1400 audit(1664715344.043:157): avc: denied { map } for pid=4507 comm="syz-executor.3" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 12:55:44 executing program 3: setrlimit(0xe, &(0x7f0000000280)={0x0, 0x4}) 12:55:44 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x100000e) 12:55:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) 12:55:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000018c0)={0x14}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x3c}}, 0x0) 12:55:44 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4002, 0x0) 12:55:44 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map_idx, @map_idx_val], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) 12:55:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:55:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) 12:55:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) 12:55:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={0x0}}, 0x0) 12:55:44 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_NAT={0x4}]}, 0x18}}, 0x0) 12:55:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) 12:55:44 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x80) 12:55:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f00000002c0), 0x4) 12:55:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x14, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39"}}) 12:55:44 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d9102, 0x0) 12:55:44 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x4000, 0x0) 12:55:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x14, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39"}}) 12:55:44 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d9102, 0x0) 12:55:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x4007, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 12:55:44 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) 12:55:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x14, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39"}}) 12:55:44 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d9102, 0x0) 12:55:44 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x5d9102, 0x0) 12:55:44 executing program 1: setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) 12:55:44 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) 12:55:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x14, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39"}}) 12:55:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) 12:55:44 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000580)={0x0, 0x0, 0x1800}, 0x20) 12:55:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, 0x0, 0x0) 12:55:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x0, 0x4}, 0x48) 12:55:44 executing program 3: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup2(r1, r0) 12:55:44 executing program 2: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 12:55:44 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x7}}}}}}}]}}, 0x0) 12:55:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) 12:55:44 executing program 1: openat$vcs(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) 12:55:44 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 12:55:44 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:44 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x0, 0x0, 0xcec3}, 0x48) [ 274.604416][ T40] audit: type=1400 audit(1664715344.523:158): avc: denied { write } for pid=4600 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 12:55:44 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000280)=""/192, 0xc0) 12:55:44 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000040)=@framed={{}, [@map_idx_val]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 274.841645][ T3803] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 275.111556][ T3803] usb 5-1: Using ep0 maxpacket: 32 [ 275.231948][ T3803] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 275.239238][ T3803] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 275.244824][ T3803] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 275.252186][ T3803] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 275.411860][ T3803] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.418644][ T3803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.424626][ T3803] usb 5-1: Product: syz [ 275.428070][ T3803] usb 5-1: Manufacturer: syz [ 275.431191][ T3803] usb 5-1: SerialNumber: syz [ 275.721827][ T3803] cdc_ncm 5-1:1.0: bind() failure [ 275.728859][ T3803] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 275.734123][ T3803] cdc_ncm 5-1:1.1: bind() failure [ 275.742132][ T3803] usb 5-1: USB disconnect, device number 6 12:55:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x8, 0x1, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 12:55:46 executing program 1: syz_emit_ethernet(0x99, &(0x7f0000000340)=ANY=[@ANYBLOB="bd"], 0x0) 12:55:46 executing program 2: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x64) 12:55:46 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000012c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "12"}}, 0x119) write$UHID_INPUT2(r0, &(0x7f00000017c0), 0x6) [ 276.206477][ T972] hid-generic 0000:0000:0000.0004: item fetching failed at offset 0/1 [ 276.212247][ T972] hid-generic: probe of 0000:0000:0000.0004 failed with error -22 12:55:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 12:55:46 executing program 2: syz_clone(0x30080400, 0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0) 12:55:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter, 0x48) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000700)) 12:55:46 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$sock_bt_hci(r0, 0xc0045878, 0x0) 12:55:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x1, &(0x7f0000000740)=@raw=[@ldst], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:46 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop15', 0x0, 0x0) 12:55:46 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) 12:55:46 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, 0x0, 0x0, r0) 12:55:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 12:55:46 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x40880, 0x0) 12:55:46 executing program 1: syz_open_dev$usbfs(&(0x7f0000000000), 0x71a, 0x0) 12:55:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x10, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x37fe0}}, 0x0) 12:55:46 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 12:55:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x400000, 0x3f}, 0x48) [ 276.422754][ T40] audit: type=1400 audit(1664715346.343:159): avc: denied { create } for pid=4652 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 12:55:46 executing program 3: openat$vcs(0xffffffffffffff9c, 0x0, 0xa40, 0x0) 12:55:46 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) bind$pptp(r0, &(0x7f0000000300)={0x18, 0x2, {0x0, @empty}}, 0x1e) 12:55:46 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) write$UHID_INPUT2(r0, 0x0, 0x0) 12:55:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 12:55:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x3}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:46 executing program 3: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 12:55:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x13}, 0x48) 12:55:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) 12:55:47 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:47 executing program 2: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001f00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 12:55:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 12:55:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0xfffffffe, 0x4) 12:55:47 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd, 0x10, r0, 0x8000000) 12:55:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x8000, 0x80, 0x3cb, 0x81, {{0x7, 0x4, 0x1, 0x2e, 0x1c, 0x67, 0x0, 0x5, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x23}, {[@timestamp_addr={0x44, 0x4, 0x0, 0x1, 0x7}, @end, @noop]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_getvlan={0x20, 0x72, 0x200, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40440d1}, 0x84042) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) request_key(&(0x7f00000002c0)='trusted\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='\x00', 0xfffffffffffffffa) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x80080, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r3, &(0x7f0000000380)="990d1647c357821f6d37b39789e5668891ba4eff79c65ddb0ef60fb70d0729a4f58bd3a6fc0bc551231455afec117f3e3e6f80bacc35255f153b04b9b91c0fbfb0343adce57ab55b29704b073407952640c7cbe2a356dc2b932ee368b0f789764b4377ed214e28db6f16d55b7dcc3e07b8062535694753664460", &(0x7f0000000440)=@udp=r4}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 277.741210][ T40] audit: type=1400 audit(1664715347.653:160): avc: denied { setopt } for pid=4685 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 12:55:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x5f}, 0x48) 12:55:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, 0x0, 0xfffffffffffffe70) [ 277.781687][ T40] audit: type=1400 audit(1664715347.683:161): avc: denied { execute } for pid=4687 comm="syz-executor.2" path="/dev/vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 12:55:47 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0xe99f, 0x3f}, 0x48) 12:55:47 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r1) 12:55:47 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) 12:55:47 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0}, 0x20) 12:55:47 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) 12:55:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x15, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:47 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) 12:55:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000008c40), 0x6) 12:55:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) 12:55:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x815) 12:55:47 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0}, 0x20) 12:55:47 executing program 1: syz_open_dev$mouse(&(0x7f0000000480), 0x0, 0x0) 12:55:47 executing program 0: socketpair(0x18, 0x0, 0x1, &(0x7f0000000180)) 12:55:47 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0}, 0x20) 12:55:47 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, &(0x7f0000000200)=""/76, 0x4c) 12:55:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000004500)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x44000007) 12:55:48 executing program 2: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 12:55:48 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) dup2(r0, r0) 12:55:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) 12:55:48 executing program 0: prlimit64(0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffff7f}, 0x0) 12:55:48 executing program 1: syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x86000) 12:55:48 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:48 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xffffffffffffff0a) 12:55:48 executing program 2: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) 12:55:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) 12:55:48 executing program 0: syz_emit_ethernet(0xe41, &(0x7f0000000000)={@empty, @local, @val, {@llc={0x4, {@llc={0x0, 0x0, "1d", "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"}}}}}, 0x0) 12:55:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0xa3a3701e1d7832d3}, 0x14}}, 0x0) 12:55:48 executing program 2: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) 12:55:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x4000}, 0x0) 12:55:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:48 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 12:55:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 12:55:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@map_fd], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xc}, 0x48) 12:55:48 executing program 3: bpf$MAP_UPDATE_ELEM(0x12, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@udp}, 0x20) 12:55:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x1, &(0x7f0000000740)=@raw=[@alu], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000018c0)={0x14}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 12:55:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x0) 12:55:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) 12:55:48 executing program 0: syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @multicast, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @loopback}}}}}, 0x0) 12:55:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) 12:55:48 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/l2tp_ppp', 0x0, 0x0) 12:55:48 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x4041, 0x0) 12:55:48 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) 12:55:48 executing program 0: mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 12:55:48 executing program 1: syz_open_dev$usbfs(0x0, 0x0, 0x80) 12:55:48 executing program 2: socket$inet(0x2, 0x6, 0xee9) 12:55:48 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xffffff7f}, 0x2}, 0x0) [ 278.296380][ T40] audit: type=1400 audit(1664715348.213:162): avc: denied { create } for pid=4785 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 12:55:48 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 12:55:48 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39"}}) 12:55:48 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x14, 0x0, 0x0, 0x0}, 0x20) 12:55:48 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @broadcast, @void, {@mpls_uc={0x8848, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 12:55:48 executing program 3: prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) 12:55:48 executing program 1: process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) 12:55:48 executing program 1: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000040)={'sit0\x00', 0x0}) socketpair(0xf, 0x0, 0x0, &(0x7f0000000e80)) 12:55:48 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x5, &(0x7f0000000740)=@raw=[@ldst, @call, @map_val, @alu], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:48 executing program 3: clock_getres(0x3, &(0x7f00000004c0)) 12:55:48 executing program 2: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 12:55:48 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 12:55:48 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xf, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:48 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@call, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000001c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:48 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)) 12:55:48 executing program 3: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x6}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x80]}, 0x8}) 12:55:48 executing program 2: madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x13) 12:55:48 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ffffffffff"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:55:48 executing program 3: getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) 12:55:48 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x18}, 0x10) 12:55:48 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 12:55:48 executing program 0: socketpair(0xa, 0x0, 0x100, &(0x7f0000000000)) 12:55:48 executing program 2: select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x9, 0x9}, &(0x7f00000005c0)={0x77359400}) 12:55:48 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0) 12:55:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x5}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:48 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x0, 0x0) 12:55:48 executing program 1: clock_gettime(0x991b1d7815398456, 0x0) 12:55:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)) 12:55:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r0) 12:55:48 executing program 0: syz_clone(0x1201400, 0x0, 0x0, 0x0, 0x0, 0x0) 12:55:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x0, 0x0, 0x3f}, 0x48) 12:55:48 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x7, &(0x7f0000000740)=@raw=[@ldst={0x3, 0x3, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x2e}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffc}], &(0x7f0000000780)='syzkaller\x00', 0x3c, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001800)={0x2, 0x5, 0x200, 0x3}, 0x10}, 0x80) 12:55:48 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@cb_func]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:48 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000010000000000c"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)) 12:55:48 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x0) 12:55:48 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) 12:55:48 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x2f, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 12:55:48 executing program 0: prlimit64(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) 12:55:48 executing program 1: ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x8001, 0x2}, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x80]}, 0x8}) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) [ 278.710482][ T40] audit: type=1400 audit(1664715348.623:163): avc: denied { ioctl } for pid=4873 comm="syz-executor.3" path="socket:[34798]" dev="sockfs" ino=34798 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 12:55:48 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001880), 0x4) [ 278.730149][ T40] audit: type=1400 audit(1664715348.623:164): avc: denied { bind } for pid=4873 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 12:55:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x22, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)) 12:55:48 executing program 3: socket$netlink(0x10, 0x3, 0x1c) 12:55:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) 12:55:48 executing program 1: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000001200)='@\x00') mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:48 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000012c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, "1258687dfe9ae40be80b9a4f"}}, 0x124) write$UHID_INPUT2(r0, &(0x7f00000017c0)={0xc, {0x32, "a7be000f35580d4a64d8e6f0755a2fdbe37fa89649f89e0975b99959f917cd7f8cb46e461197bfb11739776b2b6eb2aa82e8"}}, 0x38) 12:55:48 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 12:55:48 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x430182, 0x0) 12:55:48 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x8000000) [ 278.934417][ T3758] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 278.942769][ T3758] hid-generic 0000:0000:0000.0005: item fetching failed at offset 9/12 [ 278.953267][ T3758] hid-generic: probe of 0000:0000:0000.0005 failed with error -22 12:55:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)) 12:55:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) 12:55:48 executing program 1: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000600)) 12:55:48 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) 12:55:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, 0x0, r0) 12:55:48 executing program 3: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/5, 0x5) 12:55:48 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x40142, 0x0) 12:55:48 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xd, 0x0, 0x0) 12:55:49 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 12:55:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x3, &(0x7f0000000740)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3f00}, @alu], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:49 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000080)="8a", 0x1, r0) 12:55:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x2, 0x0, 0x0) 12:55:49 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 12:55:49 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 12:55:49 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x240600, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) 12:55:49 executing program 1: clock_getres(0xf3db1aeff9ac2651, 0x0) 12:55:49 executing program 0: socketpair(0x8, 0x0, 0x0, &(0x7f0000000240)) 12:55:49 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000010000000000000e00600001822"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a07}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 279.272966][ T40] audit: type=1400 audit(1664715349.193:165): avc: denied { create } for pid=4938 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 12:55:49 executing program 0: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000100)) 12:55:49 executing program 1: munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x9, 0x0, 0xf9) 12:55:49 executing program 3: process_vm_readv(0x0, &(0x7f0000000640)=[{&(0x7f0000002700)=""/124, 0x7c}], 0x1, &(0x7f0000002b80)=[{&(0x7f0000002780)=""/240, 0xf0}, {&(0x7f0000002880)=""/103, 0x4d}, {&(0x7f0000002900)=""/34, 0xfffffffffffffe64}, {&(0x7f0000002940)=""/68, 0x44}, {&(0x7f0000002ac0)=""/37}, {&(0x7f0000002b00)=""/83}], 0x4, 0x0) 12:55:49 executing program 1: r0 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, r0) 12:55:49 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) [ 279.335559][ T40] audit: type=1400 audit(1664715349.253:166): avc: denied { prog_run } for pid=4940 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 12:55:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01b0f7eceb171530c00001"], 0x2c}}, 0x0) 12:55:49 executing program 2: add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000180)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 12:55:49 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) 12:55:49 executing program 1: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) 12:55:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000010000000000000e006000018224ea1dc7a7107f9"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:49 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 12:55:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x44, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}]}]}, 0x44}}, 0x0) 12:55:49 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) 12:55:49 executing program 2: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0xfffffffffffffebd, 0x0) 12:55:49 executing program 3: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 12:55:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x3, &(0x7f0000000740)=@raw=[@call, @map_val], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:49 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) 12:55:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x9, 0x7ffffffe}, 0x48) 12:55:49 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) 12:55:49 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}}]}}, 0x0) 12:55:49 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x14, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39", [0x0, 0x1]}}) 12:55:49 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000400)=""/144, 0x90) 12:55:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x9, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:49 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) 12:55:49 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 12:55:49 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000040)=@raw=[@func, @initr0, @map_idx_val], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0x800, 0x100}, 0x10}, 0x80) [ 279.771589][ T1951] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 280.012439][ T1951] usb 8-1: Using ep0 maxpacket: 32 [ 280.131803][ T1951] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.138797][ T1951] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.146059][ T1951] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 280.153042][ T1951] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 280.313263][ T1951] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.322215][ T1951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.329225][ T1951] usb 8-1: Product: syz [ 280.333169][ T1951] usb 8-1: Manufacturer: syz [ 280.338090][ T1951] usb 8-1: SerialNumber: syz [ 280.621813][ T1951] cdc_ncm 8-1:1.0: bind() failure [ 280.631296][ T1951] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 280.636079][ T1951] cdc_ncm 8-1:1.1: bind() failure [ 280.643614][ T1951] usb 8-1: USB disconnect, device number 4 12:55:51 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}}]}}, 0x0) 12:55:51 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000040)=@raw=[@func, @initr0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x14, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39", [0x100, 0x1]}}) 12:55:51 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:55:51 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x3, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc}, 0x48) 12:55:51 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40401, 0x0) 12:55:51 executing program 2: syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @broadcast, @void, {@mpls_uc={0x8100, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 281.381771][ T1951] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 281.622908][ T1951] usb 8-1: Using ep0 maxpacket: 32 [ 281.741741][ T1951] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.748450][ T1951] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 281.754482][ T1951] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 281.761202][ T1951] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 281.921819][ T1951] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.928973][ T1951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.936236][ T1951] usb 8-1: Product: syz [ 281.939997][ T1951] usb 8-1: Manufacturer: syz [ 281.944906][ T1951] usb 8-1: SerialNumber: syz [ 282.231976][ T1951] cdc_ncm 8-1:1.0: bind() failure [ 282.245813][ T1951] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 282.252230][ T1951] cdc_ncm 8-1:1.1: bind() failure [ 282.272005][ T1951] usb 8-1: USB disconnect, device number 5 12:55:52 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}}]}}, 0x0) 12:55:52 executing program 1: setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 12:55:52 executing program 0: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000006c0), 0x0, 0x0, 0x0) 12:55:52 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM(0xf, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) 12:55:52 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0}, 0x80) 12:55:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0x0) 12:55:52 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) 12:55:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) [ 283.001551][ T3758] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 283.244959][ T3758] usb 8-1: Using ep0 maxpacket: 32 [ 283.391824][ T3758] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 283.398873][ T3758] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 283.406150][ T3758] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 283.414742][ T3758] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 283.571699][ T3758] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.577614][ T3758] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.584485][ T3758] usb 8-1: Product: syz [ 283.588025][ T3758] usb 8-1: Manufacturer: syz [ 283.591276][ T3758] usb 8-1: SerialNumber: syz [ 283.861743][ T3758] cdc_ncm 8-1:1.0: bind() failure [ 283.869170][ T3758] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 283.873642][ T3758] cdc_ncm 8-1:1.1: bind() failure [ 283.879784][ T3758] usb 8-1: USB disconnect, device number 6 12:55:54 executing program 2: openat$vcsa(0xffffffffffffff9c, 0x0, 0x40, 0x0) 12:55:54 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}}]}}, 0x0) 12:55:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 12:55:54 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000003c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) 12:55:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x64}}, 0x0) 12:55:54 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xe, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:54 executing program 1: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002040), &(0x7f0000002080)={'enc=', 'oaep', ' hash=', {'sha256-avx2\x00'}}, 0x0, 0x0) 12:55:54 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x1, &(0x7f0000000740)=@raw=[@ldst], &(0x7f0000000780)='syzkaller\x00', 0x3c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB='W'], 0x80}}, 0x0) [ 284.641568][ T3756] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 284.881612][ T3756] usb 8-1: Using ep0 maxpacket: 32 [ 285.001719][ T3756] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.007783][ T3756] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 285.015484][ T3756] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 285.027404][ T3756] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 285.201667][ T3756] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.207601][ T3756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.213616][ T3756] usb 8-1: Product: syz [ 285.216484][ T3756] usb 8-1: Manufacturer: syz [ 285.219863][ T3756] usb 8-1: SerialNumber: syz [ 285.511776][ T3756] cdc_ncm 8-1:1.0: bind() failure [ 285.523605][ T3756] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 285.528897][ T3756] cdc_ncm 8-1:1.1: bind() failure [ 285.548927][ T3756] usb 8-1: USB disconnect, device number 7 12:55:55 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0xff, 0x40080) 12:55:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000e7eb86"], 0x14}}, 0x0) 12:55:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 12:55:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x80ffff}, 0x48) 12:55:55 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001040), 0x4) 12:55:55 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0xe, 0x0, 0x0, 0x0}, 0x20) 12:55:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="181000000010000000000000e0"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b"], 0x30}}, 0x0) 12:55:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0xbff, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39"}}) 12:55:55 executing program 2: socketpair(0x0, 0x80000, 0x0, &(0x7f0000000600)) 12:55:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0xbff, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39"}}) 12:55:56 executing program 3: clock_getres(0x0, &(0x7f0000000080)) mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/125) 12:55:56 executing program 0: openat$vcs(0xffffffffffffff9c, 0x0, 0x484281, 0x0) 12:55:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000018c0)={0x14}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x3c}}, 0x0) 12:55:56 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000012c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xef, 0x1, 0x0, 0x0, 0x50000, 0x400, "1258687dfe9ae40be80b9a4f2da6c589220e30d3118b3b97d9dbb6351ce544f5d8a1d562cf427ee9e77bc7d0f90726c340159fa2033c8b26a011ce4ee53403cf8340e5d810dde4001361eb0d8ad6ddf1df49cd054cef42c835d70609006f2622fcb1833f3e1e88a3a2da262721de9b290876cdd465c7b55a5b3bfd7e9b59c6fbff1f352ad0b3fa13d40fa39e475d82a84c74d035565fed6f70f65bf79c791d74bcda5ba52a7e4184e2d5a447d62cc2095e664da3dcac9ab9414b53725b9306e07189ee450d25855a22f218c08c0fe79acd3711501ff22b710a0d6369be10bbdfb338f5c94baeb663383de33659aac6"}}, 0x207) 12:55:56 executing program 2: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x8001}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x80]}, 0x8}) 12:55:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0xbff, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39"}}) [ 286.185596][ T3757] hid (null): unknown global tag 0xc [ 286.190237][ T3757] hid (null): global environment stack underflow 12:55:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x8, 0x1, 0x41}, 0x48) [ 286.196881][ T3757] hid (null): unknown global tag 0xe [ 286.202306][ T3757] hid-generic 0001:0000:0000.0006: unknown main item tag 0x1 12:55:56 executing program 3: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, &(0x7f00000000c0)) [ 286.207910][ T3757] hid-generic 0001:0000:0000.0006: unknown global tag 0xc [ 286.217529][ T3757] hid-generic 0001:0000:0000.0006: item 0 1 1 12 parsing failed 12:55:56 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x10000000) [ 286.225354][ T3757] hid-generic: probe of 0001:0000:0000.0006 failed with error -22 12:55:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x0, 0x4}, 0x48) 12:55:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0xbff, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39"}}) 12:55:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f}, 0x48) 12:55:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) 12:55:56 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xa0845, 0x0) 12:55:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x1, &(0x7f0000000740)=@raw=[@call], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x40102) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 12:55:56 executing program 2: mount$binder(0x0, 0x0, 0x0, 0x0, 0x0) 12:55:56 executing program 3: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 12:55:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}, 0x300}, 0x0) 12:55:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x200001ac}}, 0x0) 12:55:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM(0xc, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) 12:55:56 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$describe(0x6, r0, &(0x7f00000001c0)=""/26, 0x1a) 12:55:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000180)=ANY=[]}) 12:55:56 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x262443, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) 12:55:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:56 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:55:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'sit0\x00', 0x0}) 12:55:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x14}, 0x14}}, 0x0) 12:55:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) 12:55:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 12:55:56 executing program 1: socketpair(0x22, 0x0, 0x0, &(0x7f0000000380)) [ 286.412525][ T5130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5130 comm=syz-executor.2 12:55:56 executing program 3: process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000003c0)=""/207, 0xcf}], 0x2, 0x0) 12:55:56 executing program 1: r0 = epoll_create(0xc10) mmap(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0x10, r0, 0x0) [ 286.430611][ T40] audit: type=1400 audit(1664715356.343:167): avc: denied { create } for pid=5131 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 12:55:56 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x100000001, 0x0) 12:55:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x668, 0x1e0, 0x0, 0x0, 0x4b0, 0x2d8, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@uncond, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'veth0_virt_wifi\x00', 'vlan1\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@remote, @local, 0x0, 0x0, 'pimreg0\x00', 'team_slave_0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'vlan0\x00', 'batadv0\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "5ac5"}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6c8) 12:55:56 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000140)=""/201, 0xc9) 12:55:56 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x11, 0x0, 0x0, 0x0}, 0x20) [ 286.466421][ T5140] x_tables: duplicate underflow at hook 1 12:55:56 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000440), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, 0x0) 12:55:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) 12:55:56 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:55:56 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000040)=@raw=[@map_idx, @func, @map_idx_val], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'netdevsim0\x00'}) 12:55:56 executing program 3: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 12:55:56 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) 12:55:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x8, 0x2, &(0x7f0000000740)=@raw=[@map_val], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 12:55:56 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x10}}, 0x0) 12:55:56 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 12:55:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 12:55:56 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0) 12:55:56 executing program 3: syz_clone(0x400f080, 0x0, 0xfffffffffffffed4, 0x0, 0x0, 0x0) 12:55:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 12:55:56 executing program 0: bpf$OBJ_PIN_PROG(0x6, &(0x7f00000008c0)={&(0x7f00000005c0)='./file0\x00'}, 0x10) 12:55:56 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="8a", 0x1, r0) 12:55:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 12:55:56 executing program 2: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/233, 0xe9) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000100)=""/20, 0x14) 12:55:56 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000001700)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001840)='ns/pid_for_children\x00') 12:55:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) 12:55:56 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000440), 0x4) 12:55:56 executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) 12:55:56 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000001540)=ANY=[@ANYBLOB="cc81a7fba66d600095366ae1fbbbba6cb50922a5b501c65064d586ab856f4434db"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x2, &(0x7f0000000740)=@raw=[@ldst, @call], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:56 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/breakpoint', 0x4000, 0x0) 12:55:56 executing program 1: sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x8}, 0x0) 12:55:56 executing program 2: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x6}, 0x0, 0x0) 12:55:56 executing program 1: mount$9p_virtio(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 12:55:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 12:55:56 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) 12:55:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11}, 0x48) 12:55:56 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, &(0x7f0000000200)=""/76, 0x4c) 12:55:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x1, &(0x7f0000000740)=@raw=[@ldst={0x3, 0x3, 0x0, 0x2, 0x6, 0xfffffffffffffffc, 0xfffffffffffffff0}], &(0x7f0000000780)='syzkaller\x00', 0x3c, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001800)={0x2, 0x5, 0x200, 0x3}, 0x10}, 0x80) 12:55:56 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}}}}}]}}, 0x0) [ 287.036871][ T3757] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 287.291572][ T3757] usb 6-1: Using ep0 maxpacket: 32 [ 287.421691][ T3757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.429305][ T3757] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.436648][ T3757] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 287.442719][ T3757] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 287.448927][ T3757] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:55:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x1, &(0x7f0000000740)=@raw=[@ldst], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:57 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 12:55:57 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 12:55:57 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 12:55:57 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r2) 12:55:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 12:55:57 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x40}}}}}}}]}}, 0x0) [ 287.621753][ T3757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.628912][ T3757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.634917][ T3757] usb 6-1: Product: syz [ 287.637974][ T3757] usb 6-1: Manufacturer: syz [ 287.641718][ T3757] usb 6-1: SerialNumber: syz [ 287.891575][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 287.951767][ T3757] cdc_ncm 6-1:1.0: bind() failure [ 287.966261][ T3757] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 287.981157][ T3757] cdc_ncm 6-1:1.1: bind() failure [ 287.989061][ T3757] usb 6-1: USB disconnect, device number 5 [ 288.131607][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 288.262023][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 288.270656][ T24] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 288.279309][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 288.285818][ T24] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:55:58 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}}}}}]}}, 0x0) 12:55:58 executing program 0: bpf$MAP_UPDATE_ELEM(0x12, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=@udp}, 0x12) 12:55:58 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000003c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 12:55:58 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) [ 288.452048][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 12:55:58 executing program 2: syz_clone(0x235680, 0x0, 0x0, 0x0, 0x0, 0x0) [ 288.472100][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.477934][ T24] usb 8-1: Product: syz [ 288.481629][ T24] usb 8-1: Manufacturer: syz [ 288.484834][ T24] usb 8-1: SerialNumber: syz 12:55:58 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000040)=@raw=[@map_idx, @initr0, @map_idx_val], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x82, &(0x7f00000000c0)=""/130, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:55:58 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) [ 288.711785][ T3803] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 288.762084][ T24] cdc_ncm 8-1:1.0: bind() failure [ 288.770595][ T24] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 288.775974][ T24] cdc_ncm 8-1:1.1: bind() failure [ 288.791766][ T24] usb 8-1: USB disconnect, device number 8 [ 288.971729][ T3803] usb 6-1: Using ep0 maxpacket: 32 [ 289.091651][ T3803] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.100193][ T3803] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.107166][ T3803] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 289.114266][ T3803] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.121027][ T3803] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 12:55:59 executing program 0: syz_usb_connect(0x6, 0x93, &(0x7f0000000180)=ANY=[], 0x0) [ 289.294297][ T3803] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.302299][ T3803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.308147][ T3803] usb 6-1: Product: syz [ 289.311495][ T3803] usb 6-1: Manufacturer: syz [ 289.315286][ T3803] usb 6-1: SerialNumber: syz [ 289.591968][ T3803] cdc_ncm 6-1:1.0: bind() failure [ 289.598657][ T3803] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 289.604474][ T3803] cdc_ncm 6-1:1.1: bind() failure [ 289.612438][ T3803] usb 6-1: USB disconnect, device number 6 12:56:00 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}}}}}]}}, 0x0) 12:56:00 executing program 3: pselect6(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 12:56:00 executing program 2: select(0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 12:56:00 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:00 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @broadcast, @void, {@mpls_uc={0x8864, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 12:56:00 executing program 3: syz_clone(0x7c300000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:56:00 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 290.149352][ T40] audit: type=1400 audit(1664715360.063:168): avc: denied { write } for pid=5262 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 12:56:00 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0xfd03, 0x0) [ 290.361624][ T3670] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 290.621627][ T3670] usb 6-1: Using ep0 maxpacket: 32 [ 290.761804][ T3670] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.771130][ T3670] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.777409][ T3670] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 290.785109][ T3670] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 290.792397][ T3670] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 290.856028][ T40] audit: type=1400 audit(1664715360.773:169): avc: denied { read } for pid=3114 comm="syslogd" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 290.875424][ T40] audit: type=1400 audit(1664715360.773:170): avc: denied { append } for pid=3114 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.893403][ T40] audit: type=1400 audit(1664715360.773:171): avc: denied { open } for pid=3114 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.910654][ T40] audit: type=1400 audit(1664715360.773:172): avc: denied { getattr } for pid=3114 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.991998][ T3670] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.997731][ T3670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.003362][ T3670] usb 6-1: Product: syz [ 291.006150][ T3670] usb 6-1: Manufacturer: syz [ 291.009162][ T3670] usb 6-1: SerialNumber: syz [ 291.291880][ T3670] cdc_ncm 6-1:1.0: bind() failure [ 291.300782][ T3670] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 291.305821][ T3670] cdc_ncm 6-1:1.1: bind() failure [ 291.314059][ T3670] usb 6-1: USB disconnect, device number 7 12:56:01 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}}}}}]}}, 0x0) 12:56:01 executing program 0: syz_open_dev$mouse(&(0x7f0000000480), 0x0, 0x41) 12:56:01 executing program 3: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x3d6d, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:56:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x13, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:01 executing program 2: epoll_create1(0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), 0xffffffffffffffff) 12:56:01 executing program 0: pselect6(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:56:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x205}, 0x14}}, 0x0) 12:56:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x2}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) [ 292.091747][ T3757] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 292.341741][ T3757] usb 6-1: Using ep0 maxpacket: 32 [ 292.471957][ T3757] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.484227][ T3757] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.496188][ T3757] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 292.507315][ T3757] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 292.517500][ T3757] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 292.682372][ T3757] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.689707][ T3757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.696890][ T3757] usb 6-1: Product: syz [ 292.700542][ T3757] usb 6-1: Manufacturer: syz [ 292.704568][ T3757] usb 6-1: SerialNumber: syz [ 293.011583][ T3757] cdc_ncm 6-1:1.0: bind() failure [ 293.028643][ T3757] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 293.035722][ T3757] cdc_ncm 6-1:1.1: bind() failure [ 293.043385][ T3757] usb 6-1: USB disconnect, device number 8 12:56:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c}, 0x1c}}, 0x0) 12:56:03 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x0) 12:56:03 executing program 0: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000180)) 12:56:03 executing program 1: mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)) [ 293.517006][ T5287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5287 comm=syz-executor.2 12:56:03 executing program 0: syz_clone(0x2c300000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:56:03 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001280), r0) 12:56:03 executing program 3: add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000080)="05", 0x1, 0x0) 12:56:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 12:56:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="cdc58618162aaf2999"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010007"], 0x1c}, 0x1, 0x800000000000000}, 0x0) 12:56:03 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, 0x0, 0x0) 12:56:03 executing program 3: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r0}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) 12:56:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x7ffffffe}, 0x48) 12:56:03 executing program 1: pselect6(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, 0x0) 12:56:03 executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @val, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "d7bb6755dcfdc0ea354ac8198bf42cb555873ec147c64256d79bf5d39a0c5e35a59e8c3aaa794af647abd6d8a40404aedc8995a3803e9c4468e5c6589663c568"}}}}, 0x0) 12:56:03 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000000)=""/202, 0xffffffffffffffcf) 12:56:03 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4a00, 0x0) 12:56:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 12:56:03 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000008ec0), 0x418301, 0x0) 12:56:03 executing program 0: bpf$MAP_CREATE(0xa, &(0x7f0000000140), 0x48) 12:56:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xffffffffffffffea, &(0x7f0000000300)={&(0x7f0000000280)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x70}}, 0x0) 12:56:03 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:03 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="cc81a7fba62d600095366ae1fbbbba6cb50922a5b501c65063"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x8, 0x1}, 0x48) 12:56:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, 0x0, 0x4) 12:56:03 executing program 3: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 12:56:03 executing program 1: add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) 12:56:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 12:56:03 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x0, 0x0) 12:56:03 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}}]}}, 0x0) 12:56:03 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x90000, 0x0) 12:56:03 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x8000000) 12:56:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, 0x0, &(0x7f0000000100)=@udp}, 0x20) [ 294.121881][ T3756] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 294.202065][ T972] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 294.511964][ T3756] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 294.524646][ T3756] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.537547][ T3756] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 294.546347][ T3756] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 294.615821][ T972] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 294.625618][ T972] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 294.636853][ T972] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 294.712493][ T3756] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.721111][ T3756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.728877][ T3756] usb 8-1: Product: syz [ 294.732938][ T3756] usb 8-1: Manufacturer: syz [ 294.737007][ T3756] usb 8-1: SerialNumber: syz [ 294.801748][ T972] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.809009][ T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.817351][ T972] usb 7-1: Product: syz [ 294.820796][ T972] usb 7-1: Manufacturer: syz [ 294.824955][ T972] usb 7-1: SerialNumber: syz [ 294.852201][ T5348] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 295.021939][ T3756] cdc_ncm 8-1:1.0: bind() failure [ 295.030957][ T3756] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 295.037685][ T3756] cdc_ncm 8-1:1.1: bind() failure [ 295.054375][ T3756] usb 8-1: USB disconnect, device number 9 [ 295.102170][ T972] cdc_ncm 7-1:1.0: bind() failure [ 295.113918][ T972] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 295.120638][ T972] cdc_ncm 7-1:1.1: bind() failure [ 295.132506][ T972] usb 7-1: USB disconnect, device number 8 12:56:05 executing program 1: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) 12:56:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, 0x0}, 0x0) 12:56:05 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8}}}}}}}]}}, 0x0) 12:56:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:05 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 12:56:05 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) dup2(0xffffffffffffffff, r0) 12:56:05 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@can_delroute={0x2c, 0x19, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@CGW_MOD_AND={0x15, 0x1, {{{0x3, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "ed5a14226e7a51d4"}, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x801) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) syz_io_uring_setup(0x764f, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000"], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80001}, 0x880) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x30180, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="340000002900300327bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="060009000100ffff0a000800060005000907000006000500c1040000fc485f63a3af4cda91311afd38bc705aba061091f5762baa35103e85f180f2dbae5ade8b63a58556cd900a144339857a598f006f7f0fea7f3f156280fa74c47ecd14241294ea31ccb69116577406"], 0x34}}, 0x24000800) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) 12:56:05 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1ffff000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) [ 295.662720][ T5366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5366 comm=syz-executor.3 [ 295.801616][ T3757] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 295.811667][ T3670] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 296.041968][ T3757] usb 5-1: Using ep0 maxpacket: 32 [ 296.171797][ T3757] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 296.181697][ T3757] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 296.189919][ T3757] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 296.212210][ T3670] usb 6-1: not running at top speed; connect to a high speed hub [ 296.291740][ T3670] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.300790][ T3670] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.308778][ T3670] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 296.317526][ T3670] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 296.361961][ T3757] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.368983][ T3757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.378248][ T3757] usb 5-1: Product: syz [ 296.382550][ T3757] usb 5-1: Manufacturer: syz [ 296.387381][ T3757] usb 5-1: SerialNumber: syz [ 296.491788][ T3670] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.500514][ T3670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.506148][ T3670] usb 6-1: Product: syz [ 296.510205][ T3670] usb 6-1: Manufacturer: syz [ 296.515604][ T3670] usb 6-1: SerialNumber: syz [ 296.676385][ T3757] cdc_ncm 5-1:1.0: bind() failure [ 296.689948][ T3757] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 296.698809][ T3757] cdc_ncm 5-1:1.1: bind() failure [ 296.709042][ T3757] usb 5-1: USB disconnect, device number 7 [ 296.801865][ T3670] cdc_ncm 6-1:1.0: bind() failure [ 296.812627][ T3670] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 296.819708][ T3670] cdc_ncm 6-1:1.1: bind() failure [ 296.827350][ T3670] usb 6-1: USB disconnect, device number 9 12:56:07 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r1) 12:56:07 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x9, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:07 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) 12:56:07 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000e80)) 12:56:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 12:56:07 executing program 3: mount$9p_virtio(&(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, 0x0) 12:56:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[], 0x64}}, 0x0) 12:56:07 executing program 3: stat(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) stat(&(0x7f00000000c0)='./file0/../file0/file0\x00', 0x0) 12:56:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001b40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b00)={&(0x7f00000018c0)={0x14, 0x1, 0xa, 0x201}, 0x14}}, 0x0) 12:56:07 executing program 2: bpf$MAP_CREATE(0x5, &(0x7f0000000140), 0x48) 12:56:07 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) syz_clone(0x2c300000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:56:07 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) 12:56:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 12:56:07 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 12:56:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1d, 0x4, 0x0, 0x0, {0xa}}, 0x1c}}, 0x0) 12:56:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) 12:56:07 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006) 12:56:07 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1ffff000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:07 executing program 0: mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) 12:56:07 executing program 3: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) 12:56:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='4\x00\x00\x00)'], 0x34}}, 0x0) [ 297.761687][ T3756] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 298.012022][ T3756] usb 7-1: Using ep0 maxpacket: 32 [ 298.134598][ T3756] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 298.146825][ T3756] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.155981][ T3756] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 298.324491][ T3756] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.335488][ T3756] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.341688][ T3756] usb 7-1: Product: syz [ 298.345736][ T3756] usb 7-1: Manufacturer: syz [ 298.351029][ T3756] usb 7-1: SerialNumber: syz [ 298.668565][ T3756] cdc_ncm 7-1:1.0: bind() failure [ 298.682792][ T3756] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 298.689725][ T3756] cdc_ncm 7-1:1.1: bind() failure [ 298.706637][ T3756] usb 7-1: USB disconnect, device number 9 12:56:09 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x1c}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xffffff7f}, 0x2}, 0x0) 12:56:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01b0f7eceb171530c0000100001000136574683a697036"], 0x2c}}, 0x0) 12:56:09 executing program 3: syz_open_dev$usbfs(0x0, 0x0, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6) 12:56:09 executing program 2: mlock(&(0x7f0000002000/0x4000)=nil, 0x4000) pipe2(&(0x7f0000000080), 0x0) 12:56:09 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) 12:56:09 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 12:56:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c}, 0x1c}}, 0x0) [ 299.204617][ T40] audit: type=1400 audit(1664715369.123:173): avc: denied { create } for pid=5422 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 12:56:09 executing program 2: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) 12:56:09 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:09 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/dm_verity', 0x0, 0x0) 12:56:09 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0}, 0x20) [ 299.243539][ T40] audit: type=1400 audit(1664715369.163:174): avc: denied { write } for pid=5422 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 12:56:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c0, 0x1e0, 0x0, 0x0, 0x4b0, 0x2d8, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@uncond, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'veth0_virt_wifi\x00', 'vlan1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@ah={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@remote, @local, 0x0, 0x0, 'pimreg0\x00', 'team_slave_0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'vlan0\x00', 'batadv0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x620) 12:56:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) 12:56:09 executing program 3: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x3f}, 0x0) 12:56:09 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="48683aab7e0000e0060000f5210000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/178, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 12:56:09 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000040)=@raw=[@map_idx], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 299.312315][ T40] audit: type=1400 audit(1664715369.223:175): avc: denied { ioctl } for pid=5436 comm="syz-executor.1" path="socket:[35769]" dev="sockfs" ino=35769 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 12:56:09 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 12:56:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) 12:56:09 executing program 2: openat(0xffffffffffffffff, 0x0, 0x400c02, 0x0) 12:56:09 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) 12:56:09 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f0000000040)=@framed={{}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3}, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0xeb, 0xde, &(0x7f00000000c0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xc}, 0x10}, 0x80) 12:56:09 executing program 1: socketpair(0x18, 0x0, 0x0, &(0x7f0000000200)) 12:56:09 executing program 3: request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='[^-]{(%\'/\x00', 0xffffffffffffffff) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 12:56:09 executing program 1: syz_emit_ethernet(0x2000016e, &(0x7f0000000140)={@local, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 12:56:09 executing program 0: keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)=@encrypted_new={'new ', 'default', 0x20, 'user:', '/dev/vcsa\x00'}, 0x31, 0x0) 12:56:09 executing program 2: sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x22}, 0x0) 12:56:09 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x8000000) 12:56:09 executing program 3: request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='[^-]{(%\'/\x00', 0xffffffffffffffff) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 12:56:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 12:56:09 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000011600)="504d4d00504d4dff", 0x8}, {&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000080000000080000", 0x5f, 0x400}, {&(0x7f00000000c0)="01000000b098269c4200000500", 0xd, 0x560}, {&(0x7f0000010400)="030000001300000023000000ce", 0xd, 0x800}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f0000000000000400020000", 0x1f, 0x8c80}], 0x0, &(0x7f00000002c0)={[{@barrier}]}, 0x4) 12:56:09 executing program 1: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) [ 299.528161][ T40] audit: type=1400 audit(1664715369.443:176): avc: denied { read } for pid=5466 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 12:56:09 executing program 3: request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='[^-]{(%\'/\x00', 0xffffffffffffffff) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 299.568350][ T5475] loop0: detected capacity change from 0 to 512 12:56:09 executing program 1: pipe2(0x0, 0x0) pipe2(&(0x7f0000000080), 0x0) 12:56:09 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x80) [ 299.585859][ T40] audit: type=1400 audit(1664715369.503:177): avc: denied { mounton } for pid=5470 comm="syz-executor.0" path="/syzkaller-testdir3376122710/syzkaller.wly5hm/205/file0" dev="sda1" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 12:56:09 executing program 3: request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='[^-]{(%\'/\x00', 0xffffffffffffffff) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) [ 299.633483][ T5475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 12:56:09 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x240001, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r0, 0x11, 0x0, 0x0, 0x0}, 0x20) [ 299.651660][ T40] audit: type=1400 audit(1664715369.563:178): avc: denied { mount } for pid=5470 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 299.670545][ T5475] ext4 filesystem being mounted at /syzkaller-testdir3376122710/syzkaller.wly5hm/205/file0 supports timestamps until 2038 (0x7fffffff) [ 299.708191][ T40] audit: type=1400 audit(1664715369.623:179): avc: denied { unmount } for pid=3713 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 299.724112][ T3713] EXT4-fs (loop0): unmounting filesystem. 12:56:10 executing program 2: syz_emit_ethernet(0x99, &(0x7f0000000340)=ANY=[], 0x0) 12:56:10 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000040)=@raw=[@map_idx], &(0x7f0000000080)='GPL\x00', 0x0, 0x82, &(0x7f00000000c0)=""/130, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:10 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000040)=@raw=[@func, @initr0, @map_idx_val], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:56:10 executing program 3: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000), &(0x7f0000001240)=ANY=[], 0x0, 0x0) 12:56:10 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='{\x00') 12:56:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) 12:56:10 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 12:56:10 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14}, 0x48) 12:56:10 executing program 2: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) 12:56:10 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x4000000}, 0x48) 12:56:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x14, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39"}}) 12:56:10 executing program 0: pipe2(0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001280), 0xffffffffffffffff) 12:56:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x300}, 0x0) 12:56:10 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x13, 0x0, 0x0, 0x0}, 0x20) 12:56:10 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x7ef}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) 12:56:10 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19d}, 0x48) 12:56:10 executing program 0: mount$binder(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[]) 12:56:10 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xd, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:10 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:56:10 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x8, 0xd, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:10 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual', 0x140, 0x0) 12:56:10 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f, 0x8}, 0x48) [ 300.811596][ T3755] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 301.051694][ T3755] usb 7-1: Using ep0 maxpacket: 16 [ 301.271598][ T3755] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 301.431827][ T3755] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 301.439591][ T3755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.446951][ T3755] usb 7-1: Product: syz [ 301.449458][ T3755] usb 7-1: Manufacturer: syz [ 301.452453][ T3755] usb 7-1: SerialNumber: syz [ 301.472026][ T5524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 301.694301][ T24] usb 7-1: USB disconnect, device number 10 12:56:12 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x498482) 12:56:12 executing program 0: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) 12:56:12 executing program 3: mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 12:56:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x2c}}, 0x0) 12:56:12 executing program 2: getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) 12:56:12 executing program 0: mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x80000000) epoll_create1(0x0) pipe2$watch_queue(0x0, 0x80) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x10015) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x401, 0x0) 12:56:12 executing program 1: socket(0xa, 0x2, 0x8) 12:56:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:12 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000001480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) clock_gettime(0x5, &(0x7f0000001440)) 12:56:12 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12:56:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMGET(r0, 0x5415, 0x0) 12:56:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 12:56:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x2, &(0x7f0000000740)=@raw=[@ldst, @call], &(0x7f0000000780)='syzkaller\x00', 0x3c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x10}, 0x48) 12:56:12 executing program 1: syz_open_dev$usbfs(0xfffffffffffffffc, 0x0, 0x410102) 12:56:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) [ 302.542190][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 302.791653][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 302.912012][ T24] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 302.918888][ T24] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 302.929333][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.092194][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.100505][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.107490][ T24] usb 7-1: Product: syz [ 303.111680][ T24] usb 7-1: Manufacturer: syz [ 303.116173][ T24] usb 7-1: SerialNumber: syz [ 303.441907][ T24] usb 7-1: 0:2 : does not exist [ 303.462299][ T24] usb 7-1: USB disconnect, device number 11 [ 303.483935][ T4213] udevd[4213]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 12:56:13 executing program 2: add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 12:56:13 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/virtio_pci', 0x203, 0x0) 12:56:13 executing program 3: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x4002, 0x0) 12:56:13 executing program 0: setrlimit(0xe, &(0x7f0000000280)) 12:56:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x9, 0x2, &(0x7f0000000740)=@raw=[@map_val], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:13 executing program 0: process_vm_readv(0x0, &(0x7f0000000640)=[{&(0x7f0000002700)=""/124, 0x7c}], 0x1, &(0x7f0000002b80)=[{&(0x7f0000002780)=""/240, 0xf0}], 0x1, 0x0) 12:56:13 executing program 3: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xeb9) 12:56:13 executing program 2: process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/246, 0xf6}, {0x0}], 0x2, 0x0) 12:56:13 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, 0x0, r1) 12:56:13 executing program 3: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 12:56:13 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 12:56:13 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x450803, 0x0) 12:56:13 executing program 2: select(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000580)={0x9}, 0x0) 12:56:13 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sync_file_range(r0, 0x0, 0x8000000000000000, 0x0) 12:56:13 executing program 3: add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="05", 0x1, 0x0) 12:56:13 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x18}, 0x48) 12:56:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x20000758, 0x2, &(0x7f0000000740)=@raw=[@map_val], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x14, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:13 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/firmware_class', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 12:56:13 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x300}, 0x0) 12:56:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 12:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x15, 0x0, 0x0) 12:56:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) 12:56:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x3, 0x0, 0x0, 0x0, 0x8c}, 0x48) 12:56:13 executing program 0: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) syz_open_dev$usbfs(&(0x7f0000000000), 0x71a, 0x2440) 12:56:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x0, 0x0, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0x5, 0x14, "55a1205a427a1fa37ba9db57abdba4f282ba6e7d0742475c163f0b88d46ecd2ff0eb60c6ed87bb4c8c1f5cb206bec38d524fafea3d71fefe733b7d32d695fe82", "bcb926b51365bbce6271978bfcfee23b164024818595de7f3fb66ecc825dc60fd3b9505157779d9c118582bd0f06b7ad72f6a700972ba93e754c30c299eb0ca3", "ded1403a0f87d100a95a6c2510b87e3d7ebebbd7e33dbf9b3c43b7d60ce36f39", [0x100, 0x1]}}) 12:56:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) syz_clone3(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0) 12:56:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_setlink={0x20, 0x13, 0x1}, 0x20}}, 0x0) 12:56:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x3}]}}}}}) 12:56:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x16, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x5f, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 12:56:14 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf0ff1f, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:14 executing program 3: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 12:56:14 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_pts(r0, 0x0) 12:56:14 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xf0ff7f00000000}, 0x300}, 0x0) 12:56:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x408, 0x1e0, 0x0, 0x0, 0x4b0, 0x2d8, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'veth0_virt_wifi\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@remote, @local, 0x0, 0x0, 'pimreg0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'vlan0\x00', 'batadv0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 12:56:14 executing program 3: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0) 12:56:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f}, 0x48) bpf$MAP_UPDATE_ELEM(0xc, 0x0, 0x0) 12:56:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, 'U3n'}) 12:56:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) 12:56:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x3, &(0x7f0000000740)=@raw=[@map_val, @alu], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x200018c0) 12:56:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x0, 0x1, &(0x7f0000000740)=@raw=[@ldst={0x0, 0x3, 0x0, 0x2, 0x6, 0xfffffffffffffffc, 0xfffffffffffffff0}], &(0x7f0000000780)='syzkaller\x00', 0x3c, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001800)={0x2, 0x5, 0x200, 0x3}, 0x10}, 0x80) 12:56:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, {{0x10}, {0x9effffff}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:56:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) [ 304.221567][ T40] audit: type=1400 audit(1664715374.133:180): avc: denied { write } for pid=5654 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 12:56:14 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) 12:56:14 executing program 3: openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x321100, 0x0) 12:56:14 executing program 2: syz_clone(0x20804380, 0x0, 0x0, 0x0, 0x0, 0x0) 12:56:14 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) socketpair(0x26, 0x0, 0x0, &(0x7f00000000c0)) 12:56:14 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000007, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x40142, 0x0) fstat(r0, &(0x7f0000001540)) [ 304.287816][ T40] audit: type=1400 audit(1664715374.203:181): avc: denied { create } for pid=5669 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 12:56:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x2, &(0x7f0000000740)=@raw=[@map_val], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x0, 0x0, 0x3f}, 0x48) 12:56:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}, 0xa}, 0x0) 12:56:14 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:14 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x10, 0xffffffffffffffff, 0x8000000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:14 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 12:56:14 executing program 0: syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffff8f7, 0x0) 12:56:14 executing program 1: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x6}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 12:56:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getnexthop={0x28, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8}]}, 0x28}}, 0x0) 12:56:14 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000009c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) 12:56:14 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008c00)) 12:56:14 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x300}, 0x0) [ 304.474708][ T40] audit: type=1400 audit(1664715374.393:182): avc: denied { bind } for pid=5693 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 12:56:14 executing program 0: syz_open_dev$mouse(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 12:56:14 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x46000, 0x0) 12:56:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x24}, 0x24}}, 0x0) 12:56:14 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:14 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0xd, 0x0, 0x0, 0x0}, 0x20) 12:56:14 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0x16, 0x0, 0x0, 0x0}, 0x20) 12:56:14 executing program 1: process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 12:56:14 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0}, 0x20) 12:56:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 12:56:14 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) 12:56:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x4f}}, 0x0) 12:56:14 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="cc81a7fba62d600095366ae1fbbbba6cb50922a5b501c65064d586ab85162aea69"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:14 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000040)=@raw=[@map_idx], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:14 executing program 0: mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)) 12:56:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0xfffffffffffffffc}}, 0x0) 12:56:14 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0xc0, 0x0) 12:56:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 12:56:14 executing program 3: mount$binder(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 12:56:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:56:14 executing program 1: mount$binder(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)) 12:56:14 executing program 2: getresgid(&(0x7f0000000100), &(0x7f0000000140), 0x0) 12:56:14 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\x00') mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/155) 12:56:14 executing program 3: sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x0, 0x80000, 0x0, &(0x7f0000000600)) 12:56:14 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) signalfd(r0, &(0x7f0000000100), 0x8) 12:56:14 executing program 2: signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) 12:56:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000008d40)=@proc={0x10, 0x0, 0x0, 0x200}, 0xc) 12:56:14 executing program 1: r0 = socket(0xa, 0x3, 0x5) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) 12:56:14 executing program 1: socketpair(0x11, 0x0, 0x0, &(0x7f0000000380)) 12:56:14 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) write$cgroup_int(r0, 0x0, 0x0) 12:56:14 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='block_bio_remap\x00', r0}, 0x10) [ 304.695954][ T40] audit: type=1400 audit(1664715374.613:183): avc: denied { connect } for pid=5751 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 12:56:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 12:56:14 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x32, 0xffffffffffffffff, 0x8000000) sysinfo(&(0x7f0000000000)=""/183) 12:56:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x3ff, 0x0, 0x3f}, 0x48) 12:56:14 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) 12:56:14 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 12:56:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x10, &(0x7f0000000740)=@raw=[@map_val, @alu], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xa}, 0x0) 12:56:14 executing program 3: mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 12:56:14 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) 12:56:14 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 12:56:14 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x764f, &(0x7f0000000440)={0x0, 0x3b7d, 0x10, 0x0, 0x207}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00"/11], 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x20, 0x0, 0x400, 0x70bd26, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80001}, 0x880) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x30180, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[], 0x34}}, 0x24000800) inotify_add_watch(r1, &(0x7f0000000940)='./file0\x00', 0x1001c04) 12:56:14 executing program 0: syz_clone(0x241a4000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:56:14 executing program 3: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:14 executing program 0: syz_emit_ethernet(0x19, &(0x7f0000000000)={@empty, @local, @val, {@llc={0x4, {@llc={0x0, 0x0, "1d"}}}}}, 0x0) [ 304.817615][ T40] audit: type=1400 audit(1664715374.733:184): avc: denied { create } for pid=5782 comm="syz-executor.1" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 12:56:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20008011) [ 304.833578][ T5784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5784 comm=syz-executor.1 [ 304.842968][ T40] audit: type=1400 audit(1664715374.733:185): avc: denied { map } for pid=5782 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 12:56:14 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) [ 304.866142][ T40] audit: type=1400 audit(1664715374.733:186): avc: denied { read write } for pid=5782 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 12:56:14 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) 12:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x1, &(0x7f0000000740)=@raw=[@ldst], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:14 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_idx_val, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0xeb, 0xde, &(0x7f00000000c0)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0}, 0x80) 12:56:14 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x40) 12:56:14 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) 12:56:14 executing program 2: syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@local, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 12:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x2, &(0x7f0000000740)=@raw=[@map_val={0x9}], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:14 executing program 3: r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) 12:56:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x550, 0x1e0, 0x0, 0x0, 0x4b0, 0x2d8, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@uncond, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'veth0_virt_wifi\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@remote, @local, 0x0, 0x0, 'pimreg0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'vlan0\x00', 'batadv0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b0) 12:56:14 executing program 3: openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x7, &(0x7f0000000740)=@raw=[@ldst, @call, @map_val, @map_idx={0x18, 0x5}, @alu={0x0, 0x0, 0x0, 0x1}], &(0x7f0000000780)='syzkaller\x00', 0x3c, 0x1000, &(0x7f00000007c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 12:56:14 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xa00}, 0x0) 12:56:14 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000001c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:14 executing program 0: syz_clone(0x2430a000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:56:14 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040), 0xb, 0x6800) 12:56:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f00000018c0)=ANY=[], 0x14}}, 0x0) 12:56:14 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) bind$xdp(r0, 0x0, 0x0) 12:56:14 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000001600)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) 12:56:14 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @remote}}}) 12:56:14 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x7fffdf002000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:15 executing program 1: syz_emit_ethernet(0x99, 0x0, 0x0) 12:56:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter, 0x48) 12:56:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1d, 0x4}, 0x1c}}, 0x0) 12:56:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x7, 0x3f, 0x10}, 0x48) 12:56:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 12:56:15 executing program 1: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) 12:56:15 executing program 3: openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) 12:56:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002cc76f"], 0x1c}}, 0x0) 12:56:15 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_idx_val, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:15 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:56:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_delneigh={0x1c}, 0x1c}}, 0x0) 12:56:15 executing program 3: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000a80)="0f", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 12:56:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:15 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x40102) 12:56:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB=')'], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 12:56:15 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) read$FUSE(r0, &(0x7f00000026c0)={0x2020}, 0x2020) 12:56:15 executing program 1: add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 12:56:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x12, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:15 executing program 2: r0 = getpgrp(0x0) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 12:56:15 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000440), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) 12:56:15 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x1ffff000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) mprotect(&(0x7f0000b62000/0x4000)=nil, 0x4000, 0xd) 12:56:15 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 12:56:15 executing program 3: bpf$MAP_CREATE(0x14, &(0x7f0000000140), 0x48) 12:56:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, 0x0, 0x0) 12:56:15 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0xeeb39ee99e36c3ec) 12:56:15 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x10000000) 12:56:15 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r0, 0x0, 0x0) 12:56:15 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:15 executing program 3: socket(0xa, 0x0, 0x7ff) 12:56:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:15 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xffffff7f}}, 0x0) 12:56:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}}, 0x2c}}, 0x0) 12:56:15 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0)=0x4, 0x4) 12:56:15 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 12:56:15 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) 12:56:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) 12:56:15 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="cc81a7fba62d600095366ae1fbbbba6cb5"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 305.431687][ T40] audit: type=1400 audit(1664715375.343:187): avc: denied { setopt } for pid=5906 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 12:56:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty, {[@noop]}}}}}) 12:56:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, 0xffffffffffffffff, 0x0) 12:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x7, &(0x7f0000000740)=@raw=[@ldst={0x3, 0x3, 0x0, 0x2, 0x6, 0xfffffffffffffffc, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x2e}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @alu={0x7, 0x0, 0xb, 0x1, 0x3, 0xffffffffffffffc0, 0xfffffffffffffffc}], &(0x7f0000000780)='syzkaller\x00', 0x3c, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001800)={0x2, 0x5, 0x200, 0x3}, 0x10}, 0x80) 12:56:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="a78ccc406ca17491a3"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140), 0x48) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:15 executing program 3: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000681c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006b480)={0x2, [], 0x8, "5f31ab7f1a08ef"}) syz_clone(0x2c300000, 0x0, 0x0, 0x0, 0x0, 0x0) 12:56:15 executing program 2: syz_clone(0x20804380, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0) 12:56:15 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) fstat(r0, &(0x7f00000000c0)) 12:56:15 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x16, 0x0, 0x0, 0x0}, 0x20) 12:56:15 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000e7eb86"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) 12:56:15 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 12:56:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000100000061"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:15 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x202d81, 0x0) 12:56:15 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @broadcast, @void, {@mpls_uc={0x4305, {[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 12:56:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@dellink={0x20}, 0x20}}, 0x0) 12:56:15 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000010000000000000e00600071822"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000001c0)=""/180, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:15 executing program 0: select(0x40, &(0x7f0000000500), &(0x7f0000000540), 0x0, &(0x7f00000005c0)={0x77359400}) 12:56:15 executing program 1: mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 12:56:15 executing program 3: syz_clone(0x51284080, 0x0, 0x0, 0x0, 0x0, 0x0) 12:56:15 executing program 2: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) 12:56:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 12:56:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x40142, 0x0) fstat(r0, 0x0) 12:56:15 executing program 2: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000700)) 12:56:15 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 306.261588][ T3758] Bluetooth: hci0: command 0x0401 tx timeout 12:56:16 executing program 0: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) 12:56:16 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f00000021c0), 0x40, 0x0) 12:56:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1d, 0x4}, 0x1c}}, 0x0) 12:56:16 executing program 3: syz_emit_ethernet(0xae, &(0x7f0000000000)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @gre={{0x16, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@loopback}, {@empty}, {@private}, {@multicast2}, {}, {@multicast1}, {@private}]}]}}}}}}, 0x0) 12:56:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x10, 0x0, 0x0, 0x400}, 0x48) 12:56:16 executing program 1: select(0x40, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)={0x9}, &(0x7f00000005c0)={0x77359400}) 12:56:16 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:16 executing program 0: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 12:56:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa050000c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 12:56:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 12:56:16 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 12:56:16 executing program 3: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x32, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 12:56:16 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/fd1', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x450803, 0x0) 12:56:16 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) 12:56:16 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/155) [ 306.891843][ T3755] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 306.921592][ T51] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 307.161598][ T51] usb 7-1: Using ep0 maxpacket: 32 [ 307.261906][ T3755] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.273087][ T3755] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.281726][ T3755] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.281812][ T51] usb 7-1: unable to get BOS descriptor or descriptor too short [ 307.289692][ T3755] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.351670][ T51] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 307.358404][ T51] usb 7-1: can't read configurations, error -71 [ 307.481847][ T3755] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.489556][ T3755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.495786][ T3755] usb 5-1: Product: syz [ 307.499573][ T3755] usb 5-1: Manufacturer: syz [ 307.503582][ T3755] usb 5-1: SerialNumber: syz [ 307.791663][ T3755] cdc_ncm 5-1:1.0: bind() failure [ 307.799958][ T3755] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 307.805285][ T3755] cdc_ncm 5-1:1.1: bind() failure [ 307.815179][ T3755] usb 5-1: USB disconnect, device number 8 12:56:18 executing program 0: select(0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0)={0x77359400}) 12:56:18 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/ram14', 0x20000, 0x0) 12:56:18 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8832, 0xffffffffffffffff, 0x8000000) 12:56:18 executing program 2: clock_getres(0x0, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x8000000) 12:56:18 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) read$FUSE(r0, &(0x7f00000026c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_rr_get_interval(r1, 0x0) 12:56:18 executing program 2: setrlimit(0x0, &(0x7f0000000280)) 12:56:18 executing program 1: syz_clone(0x2c320000, 0x0, 0x53, 0x0, 0x0, 0x0) 12:56:18 executing program 3: syz_open_dev$usbfs(0x0, 0x0, 0x0) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000840)=""/235) 12:56:19 executing program 0: add_key(&(0x7f0000000180)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 12:56:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 12:56:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter, 0x48) 12:56:19 executing program 1: syz_open_dev$usbfs(0xfffffffffffffffc, 0x0, 0x0) 12:56:19 executing program 2: socketpair(0x1, 0x4, 0x312f, &(0x7f0000000000)) 12:56:19 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x11, &(0x7f0000001840)={0x0, 0x2, &(0x7f0000000740)=@raw=[@map_val], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x0, 0x0, 0x0, 0x4}, 0x48) 12:56:19 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x19, 0xd, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x10}}, 0x0) 12:56:19 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000500), 0x10) 12:56:19 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) [ 309.281536][ T40] audit: type=1400 audit(1664715379.193:188): avc: denied { bind } for pid=6026 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 12:56:19 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:56:19 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000000)) 12:56:19 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x2000, 0x4) 12:56:19 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0x0) 12:56:19 executing program 0: socket(0xa, 0x5, 0x34e0) [ 309.323379][ T40] audit: type=1400 audit(1664715379.243:189): avc: denied { read } for pid=6035 comm="syz-executor.1" name="rtc0" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 12:56:19 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffc, 0x2a8600) 12:56:19 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) [ 309.346563][ T40] audit: type=1400 audit(1664715379.243:190): avc: denied { open } for pid=6035 comm="syz-executor.1" path="/dev/rtc0" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 12:56:19 executing program 3: syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe4ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000001c0)=ANY=[], 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000006c0)='./bus\x00') rmdir(&(0x7f0000000080)='./file1\x00') 12:56:19 executing program 1: clock_gettime(0x3797f21fe21ffa45, 0x0) 12:56:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x668, 0x1e0, 0x0, 0x0, 0x4b0, 0x2d8, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@uncond, 0x0, 0x1b8, 0x1e0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private=0xa010102, 0x0, 0x0, 'veth0_virt_wifi\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@remote, @local, 0x0, 0xff, 'pimreg0\x00', 'team_slave_0\x00', {}, {}, 0x67}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x2, 0x2, 0x2, 0x1, 0x2, 0x2], 0x5}}}]}, @ECN={0x28}}, {{@ip={@rand_addr=0x64010101, @broadcast, 0xffffffff, 0xff, 'vlan0\x00', 'batadv0\x00', {}, {}, 0x67, 0x3, 0x20}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x408, 0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x7, 0x0, 0x2, 0x6, 0x2], 0x1, 0x3}, {0xffffffffffffffff, [0x5, 0x6, 0x4, 0x5, 0x4], 0x0, 0x2}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "5ac5"}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x7]}, {0x0, [0x4, 0x5, 0x5, 0x7], 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6c8) 12:56:19 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x3, &(0x7f0000000740)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x3}, @alu], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 309.389654][ T6049] loop3: detected capacity change from 0 to 4096 [ 309.408240][ T6052] x_tables: duplicate underflow at hook 1 [ 309.409928][ T6049] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. 12:56:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x127e, 0x0) 12:56:19 executing program 2: process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0) 12:56:19 executing program 0: socket(0xa, 0x3, 0x5) [ 309.427789][ T40] audit: type=1400 audit(1664715379.343:191): avc: denied { write } for pid=6048 comm="syz-executor.3" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 12:56:19 executing program 1: add_key$keyring(&(0x7f0000001fc0), 0x0, 0x0, 0x0, 0xfffffffffffffff8) [ 309.441848][ T40] audit: type=1400 audit(1664715379.343:192): avc: denied { add_name } for pid=6048 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.442333][ T6049] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz-executor.3: Logical block already allocated [ 309.468478][ T40] audit: type=1400 audit(1664715379.343:193): avc: denied { create } for pid=6048 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 309.485191][ T6049] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz-executor.3: Logical block already allocated [ 309.512326][ T6049] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz-executor.3: Logical block already allocated 12:56:19 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@dstopts_2292={{0x18}}], 0x18}, 0x20008045) 12:56:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x127d, 0x0) 12:56:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000300)="fa12f3c2f03c3cb03b85", 0xa}, {&(0x7f0000000ac0)="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", 0x5a3}], 0x2}}], 0x1, 0x0) 12:56:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1260, 0x0) 12:56:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x0, 0x0, @remote}, 0xf, 0x0}}], 0x1, 0x0) [ 309.579924][ T3710] EXT4-fs (loop3): unmounting filesystem. 12:56:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x4, 0x0, 0x3f}, 0x48) 12:56:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) 12:56:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x125d, 0x0) 12:56:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x1c00) 12:56:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0x14}}], 0x10}}], 0x2, 0x0) 12:56:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0x14, 0x29, 0x2}}], 0x18}}], 0x2, 0x0) 12:56:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) 12:56:19 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = getpgid(0x0) getresuid(&(0x7f0000001580)=0x0, &(0x7f00000015c0), &(0x7f0000001600)) getresgid(&(0x7f0000001640)=0x0, &(0x7f0000001680), &(0x7f00000016c0)) sendmmsg$unix(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x1, 0x0) 12:56:19 executing program 1: inotify_add_watch(0xffffffffffffffff, 0x0, 0x800000) 12:56:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x125e, 0x0) 12:56:19 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}}], 0x1, 0x0) 12:56:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1263, 0x0) [ 309.735353][ T6097] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 12:56:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, 0x1c, 0x0}}], 0x1, 0x0) 12:56:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xdc05) 12:56:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1b, 0x0}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0x14}}], 0x18}}], 0x2, 0x0) 12:56:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x301, 0x0) 12:56:19 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}}], 0x1, 0x0) 12:56:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x401070ca, 0x0) 12:56:19 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}}], 0x1, 0x0) 12:56:19 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x1e, 0x0, 0x0, 0x0}, 0x20) 12:56:19 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}}], 0x1, 0x0) 12:56:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000a80)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1={0xff, 0x2, '\x00', 0x9}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x288}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x21, 0x8, 0x38, 0x4, {{0x1a, 0x4, 0x0, 0x4, 0x68, 0x64, 0x0, 0xfc, 0x29, 0x0, @local, @broadcast, {[@ssrr={0x89, 0x27, 0x26, [@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010100, @private=0xa010100, @empty, @multicast2, @empty, @multicast2, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x7, 0x3, 0xe, [{@rand_addr=0x64010101, 0xbd4}, {@private=0x100, 0x4}, {@private=0xa010102, 0x3}]}, @generic={0x94, 0xc, "8763ebeb3cf30e6c5239"}, @ra={0x94, 0x4}]}}}}}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x23}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0xfffffc00, 0x78, &(0x7f0000000100)=""/120, 0x41000, 0x4, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000280)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x7, 0x4b2, 0x7}, 0x10}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 12:56:19 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}}], 0x1, 0x0) 12:56:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0x14, 0x11}}], 0x18}}], 0x2, 0x0) 12:56:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa}, 0x48) 12:56:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x1c) 12:56:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0xa8}, @ra={0x94, 0x4, 0x1}]}}}], 0x20}, 0x0) 12:56:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1268, 0x0) 12:56:19 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x10, &(0x7f0000000640)=[@dontfrag={{0x14}}], 0x18}}], 0x2, 0x0) 12:56:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1279, 0x0) 12:56:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x2, &(0x7f0000000640)=[@dontfrag={{0x14}}], 0x18}}], 0x2, 0x0) 12:56:19 executing program 0: ioprio_set$pid(0x1, 0x0, 0x6004) 12:56:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c00, 0x0) 12:56:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x401, 0x400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x10bc, 0x8, 0x400}) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x5, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r2}) 12:56:19 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x18}, 0x0) 12:56:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x401870cc, 0x0) 12:56:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1269, 0x0) 12:56:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x127a, 0x0) [ 309.950734][ T40] audit: type=1400 audit(1664715379.863:194): avc: denied { read } for pid=6144 comm="syz-executor.3" name="card0" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 12:56:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c, 0x0}}], 0x1, 0x0) [ 309.970580][ T40] audit: type=1400 audit(1664715379.863:195): avc: denied { open } for pid=6144 comm="syz-executor.3" path="/dev/dri/card0" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 12:56:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, 0x0) 12:56:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x3) [ 310.007064][ T40] audit: type=1400 audit(1664715379.913:196): avc: denied { ioctl } for pid=6144 comm="syz-executor.3" path="/dev/dri/card0" dev="devtmpfs" ino=632 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 12:56:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x401870cb, 0x0) 12:56:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x10}, 0x1c, 0x0}}], 0x1, 0x0) 12:56:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x401070cd, 0x0) 12:56:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) 12:56:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 12:56:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1274, 0x0) 12:56:20 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x1000000}, {0xffffffffffffffff, 0x0, 0x0, 0x4000}]}) 12:56:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@hopopts={{0x18}}], 0x18}, 0x0) 12:56:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1274, 0x0) 12:56:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}}], 0x2, 0x0) 12:56:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x7ffffff7) 12:56:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0x14}}], 0x20000658}}], 0x2, 0x0) 12:56:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1267, 0x0) 12:56:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1274, 0x0) 12:56:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@dstopts_2292={{0x18}}], 0x18}, 0x0) 12:56:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x125f, 0x0) 12:56:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1274, 0x0) 12:56:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1278, 0x0) 12:56:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c07, 0x0) 12:56:20 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)={0xe, 0x7, 0x0, {{0x1, '\x00'}}}, 0xfffffffffffffff9) 12:56:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}}], 0x2, 0x0) 12:56:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}, @flowinfo={{0x14}}], 0x30}, 0x0) 12:56:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1277, 0x0) 12:56:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000021c0)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @ipv4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000200)="b4", 0x1}], 0x1}}], 0x1, 0x0) 12:56:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x40081271, 0x0) 12:56:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x127b, 0x0) 12:56:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c05, 0x0) 12:56:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x1, 0x0) 12:56:20 executing program 3: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000b00)={0x0, 0x216, '\x00', [@generic={0x0, 0x48, "28ea8a0c2c9c077377a2e59f0d2c00cd95a1763472e2fb74d2fdd0919150c8a0b068b43467518855b8686d1d5f7d5c35a6a6e47d2f54b8403f1cc856bfb1b46a000000000000db00"}, @generic={0x0, 0x1000, "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"}, @generic={0x0, 0x66, "4520da3b78ae85a52c0e66ae3533b3fa61d9b41e629a287b1afe0c571278f1ca456fb13bc02b996d978233f53266223b3355ab68405eda01dbc7b2a5a772433d3773e50c6127d45242d041118ab0798a68024ba47320db89841b5a59cd92ef1a0dce4e66a577"}]}, 0xfffffffffffffcf8) 12:56:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000f40)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0x28}}], 0x2, 0x0) 12:56:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x1d, &(0x7f0000002b40), 0x4) 12:56:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 12:56:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f0000002000)=[{0x0}, {&(0x7f0000000400)='_', 0x1}], 0x2}}], 0x1, 0x0) 12:56:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x2fc, &(0x7f0000000640)=[@dontfrag={{0x14}}], 0x18}}], 0x2, 0x0) [ 310.265825][ T40] audit: type=1400 audit(1664715380.183:197): avc: denied { setopt } for pid=6218 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 12:56:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18}, 0x48) 12:56:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}, {{&(0x7f0000000a00)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000b80)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x2, 0x0) 12:56:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000), 0x58, 0x0) 12:56:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1b, 0x0}}], 0x1, 0x0) 12:56:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x401070c9, 0x0) 12:56:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}}], 0x2, 0x0) 12:56:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) 12:56:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1276, 0x0) 12:56:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x24004800) 12:56:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000021c0)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c, 0x0}}], 0x1, 0x0) 12:56:20 executing program 3: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, r0+60000000}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 12:56:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0x14, 0x29, 0x4}}], 0x18}}], 0x2, 0x0) 12:56:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f0000002000)=[{0x0}, {&(0x7f0000000380)='&', 0x1}], 0x2}}], 0x1, 0x0) 12:56:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x17, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0x14}}], 0x18}}], 0x2, 0x0) 12:56:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x1c) 12:56:20 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa0000000) 12:56:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000f40)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}}], 0x2, 0x0) 12:56:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000a80)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast1={0xff, 0x2, '\x00', 0x9}, 0x24}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000020000000000280000000000000029000000370000008701000000000000040189050204000401400000000000001400000000000000290000000b0000000000000600000000140000000000000029000000080000000300000000000000300000000000000029000000360000008902000000000000050200020502010001050000000000c2040000cf6b0000001400000000000000290000000b000000000000050000000070000000000000002900000004000000060a0000000000003f26186f768347194a729132d0cd2959c4114b5a0ad9f7b2a3c0b93de54365f5b2664e8599f9e27b0502fcbac910fe880000000000000000000000000001c910fe8000000000000000000000000000bbc204000000180000480100000000000029000000370000003b260000000000000001000738000000000c01090005000000000000000200000000000000790d0000000000000300000000000000050000000000000000003587b334008000eef14ced32457c306278dfae5bc37fee341c7d799a295da3c12afd04105c1afb9f5d6e2f3ffdeba86e1642e37a0fc4dce7b39130262c9ee06fcae6b128a566e972e99267c3505cefc786abea00eb3a44a47b2211f4fbc59ada14a8dd0bc758bedf10859ca3b4544822bf9351f658b94844c554c719284a7f2e239f87e5d7d3e8fe5c7571c0ef0fc701ae7654bf4e33499dceb67a10607fc7901cb40eb80b374444e454f1c65ea214c37bb233c37e7ed89592239b7bfaccf761f6ef298b4db77f0c45d1901e4c77f121649840c8a778b8a719d4f225026f91535b4b504067f184a82108ebec86552855f87dc716dbaf00010014"], 0x288}, 0xa200) 12:56:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0xf}}], 0x18}}], 0x2, 0x0) 12:56:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1261, 0x0) 12:56:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4b47, 0x0) 12:56:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 12:56:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @private2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x18}}], 0x2, 0x0) 12:56:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0x14}}], 0x18}}], 0x2, 0x0) 12:56:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x40002ed, 0x0) 12:56:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote={0xfe, 0x10}}, 0x1c, 0x0}}], 0x1, 0x0) 12:56:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x3f000000, &(0x7f0000000640)=[@dontfrag={{0x14}}], 0x18}}], 0x2, 0x0) 12:56:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0x3, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x2, 0x0) 12:56:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f0000002000)=[{&(0x7f00000000c0)="9711447f175be471a1497d877e07143518bfd719c8bef79ffe178565ae6140093ae65962f4562f1e9d5631992388761f9f75d951dc6457", 0x37}, {&(0x7f0000000100)="8201ebb6d2d9fe49a4acc36b58e28566630536b49dc1ced0c4a0c8ece3f666f50b2e90a790c1933e8e4d175fd7f9aaf7714a8a6128bbeca861c8361b", 0x3c}, {&(0x7f0000000140)="d42f814f729b6655242fd7e273fb33c74693d93605363ae5958da0e2d8c58a84d9a2f3119e83d6a366cf36b14023c5e817e6ae3a668722148ff197eb11009a3a2679969c30d15b8b572f72c9449cfd2e355ac5e01c79f90ea42bce532cd7127a9bd2773c113abca09e26b37768001e70bac897fb7e7a3b7d212d298b2433666da30fa70548cbb4ab19006428c1e73366aa916fca2e0997e546ce8e84a7ba5145f38ff60d7b0d0c6bdd29727dc488e45528f5effed99db24c00d27c4f1fdddafd3613ca2b78612eb0f1d3dbd4a8bf9acfdb9a45234f0d61", 0xd7}, {&(0x7f0000000280)="4d72044ef37ee306d63bd66eb32662f1f2598fb4a9f8946752e91d65f69549a5aeaee1301d2498771eea605d1ecce996fbc165c728b62ef0691e1f6b21ee803419d0f67b2de062e9f6476632d6fb530ee61aaf99c577db24e3b5ec6ad66e2496fa83eaba502e5abd6737ed5f62262fd803f194651b983a4152446ac91c9860b26673d6c35543a85ab3e9cc75620b737c133be2a108b7d049e1dd26c345336bc7a8c0298e863f49026ddb62fedbb51d14192f4dd413bb88cd6c1875717f94de112f5ec86f478a76d6049cb476c11d152a00da0f89e2aa926c071aead003a2d35acd9f18da13a217f81d185905e28dfeb0f9781948fd", 0xf5}, {&(0x7f0000000380)="26524bfad40ddfdf7f272c2331c74a9b635e9b87a47374720ca85676f03cfb6a85dd4f0c8672fd7bb9b0502fb3c07df915b42a27a0dcefac9904de00cd7456329aa66180fc94a53a735f181e9064382fdc1ff1f86a6a932df88528d8009343671faae42800a7bff4d7d3fda6ffba8209b48b45adfd14fc71ae5a5be36547a0", 0x7f}, {&(0x7f0000000400)="5fa94c0a88f80f1ed3803cf0c7bb91c5dfd01e40c73895da6e098b9bd78290b820065bf899145eeb016c26e159c35a8061fc67ab02a279e8e3ef769d25f83dd36384136ba6b4002b30e70f39351e699cead0fcd6c451da74fbc69d7ce43bb72116ad856549e37e2db122047d7d0aa91954a771a1c886d2369f374acd6aaef39b92948303bb273c1dac80b5a02102856f1dffa5ee0d4307410f5f8adc59b9659268336cea4103f7b463a8bbe3ccf27700eb5c77649c70f97d383484dbb56cf8ee51dc73a0af6bfcb9e2", 0xc9}, {&(0x7f0000000500)="87215d13", 0x4}, {&(0x7f0000000b00)="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", 0x222}], 0x8}}], 0x1, 0x0) 12:56:20 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, 0x0) 12:56:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@dstopts_2292={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x30}, 0x0) 12:56:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote, 0x5}, 0x1c, 0x0}}], 0x40002ed, 0x0) 12:56:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0xc0fe) 12:56:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@flowinfo={{0x14}}, @flowinfo={{0x14}}], 0x5000}, 0x0) 12:56:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000440)=ANY=[], 0x10) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 12:56:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@dontfrag={{0x14, 0x29, 0x43}}], 0x18}}], 0x2, 0x0) 12:56:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x28}, 0x0) 12:56:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x11000000}}], 0x30}, 0x0) 12:56:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x1262, 0x0) 12:56:20 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0x1f}, 'port0\x00'}) 12:56:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x4000850) 12:56:20 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)={0x0, 0x0, @d}, 0x18, 0xfffffffffffffffe) 12:56:20 executing program 3: bpf$MAP_CREATE(0x14, &(0x7f0000000100)=@bloom_filter, 0x48) 12:56:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmmsg$unix(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}}], 0x1, 0x0) 12:56:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8c0) 12:56:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c, 0x0}}], 0x1, 0x4000850) 12:56:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x40049409) 12:56:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c01"], 0x2c}}, 0x0) 12:56:21 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x5411, 0x0) 12:56:21 executing program 0: openat$cuse(0xffffff9c, &(0x7f0000001340), 0x2, 0x0) 12:56:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x1, 0x0, 0x4, "96"}) 12:56:21 executing program 1: mount$fuse(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x100000, 0x0) [ 311.112894][ T6327] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:56:21 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e80)={0x48, 0x14, 0x1, 0x0, 0x0, {0xa}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "1beeae97dcc4c7aac9318a8a2f80e6a83db639bcb0c4d74468670dd40f3f905acf64d731011dec501f6812ac3d"}]}, 0x48}}, 0x0) 12:56:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0xb, &(0x7f0000000440)=""/11}, &(0x7f0000000480)="292f25e596e3", 0x0, 0x0, 0x0, 0x0, 0x0}) 12:56:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x2c, 0x0, 0x4, "96c03fb21e4a4c49f9cb11e4eef3217399d7d27e2ae68960963f0b6baeda6c6a7ad3ae62673959a6a707a06c"}) 12:56:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x38c, 0xffffffff, 0xe4, 0x0, 0x1ac, 0xffffffff, 0xffffffff, 0x2c4, 0x2c4, 0x2c4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "d23a2cba5e3946673e7782466400da71c75ecba95442cd607f2c1c717451"}}}, {{@ipv6={@mcast1, @private0, [], [], 'dvmrp1\x00', 'sit0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x101000000], 'netpci0\x00', 'dummy0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@srh={{0x2c}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @remote}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e8) [ 311.149839][ T6332] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:56:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x2c, 0x0, 0x4, "96c03fb21e4a4c49f9cb11e4eef3217399d7d27e2ae68960963f0b6baeda6c6a7ad3ae62673959a6a707a06c"}) 12:56:21 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x402c5828, 0x0) 12:56:21 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',']) [ 311.185106][ T6340] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:56:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000340)={&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r0, r1]}}], 0x14}, 0x0) 12:56:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x2c, 0x0, 0x4, "96c03fb21e4a4c49f9cb11e4eef3217399d7d27e2ae68960963f0b6baeda6c6a7ad3ae62673959a6a707a06c"}) 12:56:21 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 12:56:21 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'macvlan1\x00'}) [ 311.226228][ T6348] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:56:21 executing program 3: r0 = gettid() tgkill(0xffffffffffffffff, r0, 0x0) 12:56:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x2c, 0x0, 0x4, "96c03fb21e4a4c49f9cb11e4eef3217399d7d27e2ae68960963f0b6baeda6c6a7ad3ae62673959a6a707a06c"}) 12:56:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x24}}, 0x0) [ 311.258665][ T6355] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:56:21 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x894a, &(0x7f0000000080)) 12:56:21 executing program 0: bpf$MAP_CREATE(0x16, &(0x7f0000000100)=@bloom_filter, 0x48) 12:56:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 12:56:21 executing program 2: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, r0+60000000}, 0x0) 12:56:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x127c, 0x0) 12:56:21 executing program 0: creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2000, 0x0) 12:56:21 executing program 1: openat$null(0xffffff9c, &(0x7f0000000000), 0xf6ffffff, 0x0) 12:56:22 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@ieee802154, 0x80) 12:56:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x541b) 12:56:22 executing program 3: socket$inet(0x2, 0x2, 0x46) 12:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) 12:56:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x5452, &(0x7f0000000040)) 12:56:22 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x100400) 12:56:22 executing program 0: openat$autofs(0xffffff9c, &(0x7f0000000040), 0x181841, 0x0) 12:56:22 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x2f0}, 0x0) 12:56:22 executing program 1: bpf$MAP_CREATE(0x17, &(0x7f0000000100)=@bloom_filter, 0x48) 12:56:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000011c0)='}', 0x1}], 0x1}}], 0x1, 0x0) 12:56:22 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x6001) 12:56:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000280)) 12:56:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x227c) 12:56:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) 12:56:22 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x6001) 12:56:22 executing program 3: mount$fuse(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x60004, 0x0) 12:56:22 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'team_slave_0\x00'}) 12:56:22 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x6001) 12:56:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0xc0189436) 12:56:22 executing program 3: bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0xffffffffffffffe1) 12:56:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x26, 0x0, 0x4, "96c03fb21e4a4c49f9cb11e4eef3217399d7d27e2ae68960963f0b6baeda6c6a7ad3ae626739"}) 12:56:22 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x6001) 12:56:22 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x2, &(0x7f0000000040)) 12:56:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0}) [ 312.323909][ T6415] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:56:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x101) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 12:56:22 executing program 1: openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) 12:56:22 executing program 2: openat$null(0xffffff9c, &(0x7f0000000040), 0x40342, 0x0) 12:56:22 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x2, &(0x7f0000000040)) 12:56:22 executing program 1: clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000380)={0x0, r0+60000000}, 0x0) 12:56:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0xc0045878) 12:56:22 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 12:56:22 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x2, &(0x7f0000000040)) 12:56:22 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000180)) 12:56:22 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) ioctl$sock_FIOSETOWN(r0, 0x2, &(0x7f0000000040)) 12:56:22 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000004a00)={&(0x7f0000004580)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004940)=[@ip_retopts={{0x10, 0x0, 0x7, {[@noop]}}}], 0x10}, 0x0) 12:56:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x541b) 12:56:22 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)) 12:56:22 executing program 3: r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) 12:56:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) 12:56:22 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x5421, &(0x7f0000000080)) 12:56:22 executing program 0: r0 = openat$zero(0xffffff9c, &(0x7f0000000200), 0x101002, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) 12:56:22 executing program 3: pselect6(0x40, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000380), 0x0) 12:56:22 executing program 2: openat$procfs(0xffffff9c, &(0x7f0000004a80)='/proc/bus/input/handlers\x00', 0x0, 0x0) 12:56:22 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000002c0)=ANY=[]) 12:56:22 executing program 0: syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0}) pselect6(0x40, &(0x7f0000000280), &(0x7f00000002c0)={0x9}, &(0x7f0000000300)={0x2, 0x0, 0x7f}, &(0x7f0000000380)={r0}, &(0x7f0000000400)={&(0x7f00000003c0)={[0xe87]}, 0x8}) 12:56:22 executing program 3: add_key$user(&(0x7f0000000100), 0x0, &(0x7f0000000180)='Y', 0x1, 0xfffffffffffffffb) 12:56:22 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/user\x00') 12:56:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:56:22 executing program 0: creat(&(0x7f00000032c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='2']) 12:56:22 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8906, 0x0) 12:56:22 executing program 2: openat$null(0xffffff9c, &(0x7f0000000000), 0x75d329032df6f018, 0x0) 12:56:22 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x89b1, 0x0) 12:56:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000004a00)={&(0x7f0000004580)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000004940)=[@ip_tos_int={{0x10}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x47}, @noop, @timestamp={0x44, 0x4}]}}}], 0x28}, 0x0) 12:56:22 executing program 2: add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='Y', 0x1, 0xfffffffffffffffb) 12:56:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000006c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:56:22 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xa7d, 0x141202) write$FUSE_LSEEK(r0, 0x0, 0x0) 12:56:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000100)) 12:56:22 executing program 1: r0 = openat$zero(0xffffff9c, &(0x7f0000000200), 0x101002, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000240)={0x18}, 0x18) 12:56:22 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x0) 12:56:22 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=virtio,', {[{@version_u}, {@version_9p2000}], [{@obj_type={'obj_type', 0x3d, '/dev/autofs\x00'}}]}}) 12:56:22 executing program 3: semctl$GETNCNT(0xffffffffffffffff, 0x0, 0x3, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) fchmod(r0, 0x0) [ 313.007639][ C0] ================================================================== 12:56:22 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000700)='/proc/tty/ldiscs\x00', 0x0, 0x0) 12:56:22 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=virtio,', {[{@version_u}, {@version_9p2000}], [{@obj_type={'obj_type', 0x3d, '/dev/autofs\x00'}}]}}) [ 313.012897][ C0] BUG: KASAN: use-after-free in __lock_acquire+0x3ee7/0x56d0 12:56:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x402c5828) [ 313.020998][ C0] Read of size 8 at addr ffff88801be36818 by task udevd/3132 [ 313.025684][ C0] 12:56:22 executing program 3: pipe2$9p(&(0x7f0000000000), 0x4000) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000180)) openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) [ 313.028380][ C0] CPU: 0 PID: 3132 Comm: udevd Not tainted 6.0.0-rc7-syzkaller-00239-gb357fd1c2afc #0 [ 313.038178][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 313.045082][ C0] Call Trace: [ 313.047594][ C0] [ 313.049844][ C0] dump_stack_lvl+0xcd/0x134 [ 313.054936][ C0] print_report.cold+0x2ba/0x6e9 12:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 12:56:22 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) [ 313.058822][ C0] ? __lock_acquire+0x3ee7/0x56d0 [ 313.063668][ C0] kasan_report+0xb1/0x1e0 [ 313.067239][ C0] ? __lock_acquire+0x3ee7/0x56d0 [ 313.071179][ C0] __lock_acquire+0x3ee7/0x56d0 [ 313.074281][ C0] ? find_held_lock+0x2d/0x110 [ 313.077716][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 313.081130][ C0] ? __wake_up_common_lock+0xde/0x130 [ 313.084207][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 313.087246][ C0] lock_acquire+0x1ab/0x570 [ 313.090123][ C0] ? p9_req_put+0xc6/0x250 [ 313.092962][ C0] ? lock_release+0x780/0x780 [ 313.095834][ C0] ? __wake_up_common_lock+0xde/0x130 [ 313.099139][ C0] ? __wake_up_common+0x650/0x650 [ 313.102378][ C0] _raw_spin_lock_irqsave+0x39/0x50 [ 313.105790][ C0] ? p9_req_put+0xc6/0x250 [ 313.108585][ C0] p9_req_put+0xc6/0x250 [ 313.111307][ C0] req_done+0x1de/0x2e0 [ 313.113892][ C0] ? p9_virtio_remove+0x420/0x420 [ 313.117276][ C0] ? p9_virtio_remove+0x420/0x420 [ 313.120541][ C0] vring_interrupt+0x29d/0x3d0 [ 313.123840][ C0] ? virtqueue_poll+0x290/0x290 [ 313.127370][ C0] __handle_irq_event_percpu+0x227/0x870 [ 313.131099][ C0] handle_irq_event+0xa7/0x1e0 [ 313.134871][ C0] handle_edge_irq+0x25f/0xd00 [ 313.138629][ C0] __common_interrupt+0x9d/0x210 [ 313.143689][ C0] common_interrupt+0xa4/0xc0 [ 313.148331][ C0] [ 313.151682][ C0] [ 313.154704][ C0] asm_common_interrupt+0x22/0x40 [ 313.159454][ C0] RIP: 0010:write_comp_data+0x85/0x90 [ 313.163906][ C0] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 40 0f b6 d6 40 0f b6 [ 313.178337][ C0] RSP: 0018:ffffc90002e9fd48 EFLAGS: 00000293 [ 313.183231][ C0] RAX: 0000000000000000 RBX: 0000000074a4fb33 RCX: ffffffff81fbeb37 [ 313.188971][ C0] RDX: ffff88801a814200 RSI: 0000000000000000 RDI: 0000000000000001 [ 313.194834][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 313.199805][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801c876d98 [ 313.204640][ C0] R13: ffff8880450712f8 R14: 0000000000000001 R15: ffffffff8a46d720 [ 313.209400][ C0] ? kernfs_dir_pos+0x37/0x2a0 [ 313.212292][ C0] kernfs_dir_pos+0x37/0x2a0 [ 313.215576][ C0] kernfs_fop_readdir+0x3e1/0x910 [ 313.219107][ C0] iterate_dir+0x56a/0x6f0 [ 313.221965][ C0] __x64_sys_getdents64+0x13a/0x2c0 [ 313.225242][ C0] ? __ia32_sys_getdents+0x2b0/0x2b0 [ 313.228450][ C0] ? compat_filldir+0x6e0/0x6e0 [ 313.231465][ C0] ? syscall_enter_from_user_mode+0x22/0xb0 [ 313.235331][ C0] ? syscall_enter_from_user_mode+0x22/0xb0 [ 313.238865][ C0] do_syscall_64+0x35/0xb0 [ 313.241800][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 313.245507][ C0] RIP: 0033:0x7f08794ff097 [ 313.248068][ C0] Code: 00 00 0f 05 eb b3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 81 fa ff ff ff 7f b8 ff ff ff 7f 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 b1 5d 0f 00 f7 d8 64 89 02 48 [ 313.260458][ C0] RSP: 002b:00007fff92f3ae18 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 313.265255][ C0] RAX: ffffffffffffffda RBX: 0000561813fc10a0 RCX: 00007f08794ff097 [ 313.270189][ C0] RDX: 0000000000008000 RSI: 0000561813fc10d0 RDI: 000000000000000c [ 313.274888][ C0] RBP: 0000561813fc10d0 R08: 0000000000000030 R09: 00007f08795f5a60 [ 313.279845][ C0] R10: 0000000000000020 R11: 0000000000000293 R12: fffffffffffffe68 [ 313.285711][ C0] R13: 0000561813fc10a4 R14: 0000000000000016 R15: 0000000000000000 [ 313.290890][ C0] [ 313.292638][ C0] [ 313.294289][ C0] Allocated by task 6494: [ 313.297777][ C0] kasan_save_stack+0x1e/0x40 [ 313.301304][ C0] __kasan_kmalloc+0xa6/0xd0 [ 313.304678][ C0] kmem_cache_alloc_trace+0x25a/0x460 [ 313.309100][ C0] p9_client_create+0xaf/0x1070 [ 313.312970][ C0] v9fs_session_init+0x1e2/0x1810 [ 313.317378][ C0] v9fs_mount+0xba/0xc90 [ 313.320570][ C0] legacy_get_tree+0x105/0x220 [ 313.324218][ C0] vfs_get_tree+0x89/0x2f0 [ 313.327951][ C0] path_mount+0x1326/0x1e20 [ 313.331617][ C0] __x64_sys_mount+0x27f/0x300 [ 313.335337][ C0] do_syscall_64+0x35/0xb0 [ 313.338862][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 313.343602][ C0] [ 313.345638][ C0] Freed by task 6494: [ 313.348795][ C0] kasan_save_stack+0x1e/0x40 [ 313.352502][ C0] kasan_set_track+0x21/0x30 [ 313.355716][ C0] kasan_set_free_info+0x20/0x30 [ 313.359199][ C0] ____kasan_slab_free+0x13d/0x1a0 [ 313.363536][ C0] kfree+0x173/0x390 [ 313.366352][ C0] p9_client_create+0x7a6/0x1070 [ 313.370409][ C0] v9fs_session_init+0x1e2/0x1810 [ 313.374207][ C0] v9fs_mount+0xba/0xc90 [ 313.377523][ C0] legacy_get_tree+0x105/0x220 [ 313.381310][ C0] vfs_get_tree+0x89/0x2f0 [ 313.384936][ C0] path_mount+0x1326/0x1e20 [ 313.389057][ C0] __x64_sys_mount+0x27f/0x300 [ 313.392523][ C0] do_syscall_64+0x35/0xb0 [ 313.396123][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 313.400832][ C0] [ 313.402785][ C0] Last potentially related work creation: [ 313.407155][ C0] kasan_save_stack+0x1e/0x40 [ 313.410297][ C0] __kasan_record_aux_stack+0x7e/0x90 [ 313.414176][ C0] insert_work+0x48/0x350 [ 313.418157][ C0] __queue_work+0x625/0x1210 [ 313.422023][ C0] call_timer_fn+0x1a0/0x6b0 [ 313.425470][ C0] __run_timers.part.0+0x4a3/0xa80 [ 313.429816][ C0] run_timer_softirq+0xb3/0x1d0 [ 313.433590][ C0] __do_softirq+0x1d3/0x9c6 [ 313.436728][ C0] [ 313.438345][ C0] Second to last potentially related work creation: [ 313.442746][ C0] kasan_save_stack+0x1e/0x40 [ 313.445994][ C0] __kasan_record_aux_stack+0x7e/0x90 [ 313.449610][ C0] insert_work+0x48/0x350 [ 313.452441][ C0] __queue_work+0x625/0x1210 [ 313.455447][ C0] call_timer_fn+0x1a0/0x6b0 [ 313.458384][ C0] __run_timers.part.0+0x4a3/0xa80 [ 313.461744][ C0] run_timer_softirq+0xb3/0x1d0 [ 313.465762][ C0] __do_softirq+0x1d3/0x9c6 [ 313.469087][ C0] [ 313.470613][ C0] The buggy address belongs to the object at ffff88801be36800 [ 313.470613][ C0] which belongs to the cache kmalloc-512 of size 512 [ 313.479286][ C0] The buggy address is located 24 bytes inside of [ 313.479286][ C0] 512-byte region [ffff88801be36800, ffff88801be36a00) [ 313.486828][ C0] [ 313.488194][ C0] The buggy address belongs to the physical page: [ 313.492827][ C0] page:ffffea00006f8d80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1be36 [ 313.499888][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 313.504927][ C0] raw: 00fff00000000200 ffffea000057f8c8 ffffea00004a1208 ffff888011840600 [ 313.510288][ C0] raw: 0000000000000000 ffff88801be36000 0000000100000004 0000000000000000 [ 313.516437][ C0] page dumped because: kasan: bad access detected [ 313.520794][ C0] page_owner tracks the page as allocated [ 313.524228][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2c20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_THISNODE), pid 3712, tgid 3712 (syz-executor.1), ts 237375874911, free_ts 237341287271 [ 313.537945][ C0] get_page_from_freelist+0x109b/0x2ce0 [ 313.541828][ C0] __alloc_pages_slowpath.constprop.0+0x34d/0x2300 [ 313.546848][ C0] __alloc_pages+0x43d/0x510 [ 313.550717][ C0] cache_grow_begin+0x75/0x360 [ 313.554533][ C0] cache_alloc_refill+0x27f/0x380 [ 313.558504][ C0] kmem_cache_alloc_node_trace+0x50a/0x570 [ 313.562943][ C0] __kmalloc_node_track_caller+0x38/0x60 [ 313.567193][ C0] __alloc_skb+0xd9/0x2f0 [ 313.570735][ C0] alloc_uevent_skb+0x7b/0x210 [ 313.574459][ C0] kobject_uevent_env+0x110a/0x1640 [ 313.577579][ C0] net_rx_queue_update_kobjects+0xe9/0x510 [ 313.581273][ C0] netdev_register_kobject+0x275/0x400 [ 313.584379][ C0] register_netdevice+0xe01/0x1680 [ 313.587329][ C0] veth_newlink+0x4d6/0x9a0 [ 313.590018][ C0] __rtnl_newlink+0x1087/0x17e0 [ 313.592773][ C0] rtnl_newlink+0x64/0xa0 [ 313.595626][ C0] page last free stack trace: [ 313.598529][ C0] free_pcp_prepare+0x5e4/0xd20 [ 313.601329][ C0] free_unref_page+0x19/0x4d0 [ 313.605147][ C0] slabs_destroy+0x89/0xc0 [ 313.608903][ C0] ___cache_free+0x2a8/0x3d0 [ 313.612550][ C0] qlist_free_all+0x4f/0x1b0 [ 313.615955][ C0] kasan_quarantine_reduce+0x180/0x200 [ 313.620438][ C0] __kasan_slab_alloc+0x97/0xb0 [ 313.624379][ C0] kmem_cache_alloc_trace+0x212/0x460 [ 313.628746][ C0] kset_create_and_add+0x4b/0x1a0 [ 313.632877][ C0] netdev_register_kobject+0x1c6/0x400 [ 313.637773][ C0] register_netdevice+0xe01/0x1680 [ 313.641954][ C0] veth_newlink+0x33f/0x9a0 [ 313.645507][ C0] __rtnl_newlink+0x1087/0x17e0 [ 313.649404][ C0] rtnl_newlink+0x64/0xa0 [ 313.653243][ C0] rtnetlink_rcv_msg+0x43a/0xca0 [ 313.657458][ C0] netlink_rcv_skb+0x153/0x420 [ 313.661352][ C0] [ 313.663248][ C0] Memory state around the buggy address: [ 313.667692][ C0] ffff88801be36700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 313.674329][ C0] ffff88801be36780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 313.680487][ C0] >ffff88801be36800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.686473][ C0] ^ [ 313.689752][ C0] ffff88801be36880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.694791][ C0] ffff88801be36900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.699454][ C0] ================================================================== [ 313.704880][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 313.710130][ C0] CPU: 0 PID: 3132 Comm: udevd Not tainted 6.0.0-rc7-syzkaller-00239-gb357fd1c2afc #0 [ 313.717066][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 313.723069][ C0] Call Trace: [ 313.725861][ C0] [ 313.728093][ C0] dump_stack_lvl+0xcd/0x134 [ 313.731976][ C0] panic+0x2c8/0x627 [ 313.734493][ C0] ? panic_print_sys_info.part.0+0x10b/0x10b [ 313.738227][ C0] ? print_report.cold+0x4c6/0x6e9 [ 313.741917][ C0] ? __lock_acquire+0x3ee7/0x56d0 [ 313.745578][ C0] end_report.part.0+0x3f/0x7c [ 313.749405][ C0] kasan_report.cold+0xa/0xf [ 313.752885][ C0] ? __lock_acquire+0x3ee7/0x56d0 [ 313.756890][ C0] __lock_acquire+0x3ee7/0x56d0 [ 313.760431][ C0] ? find_held_lock+0x2d/0x110 [ 313.764069][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 313.768604][ C0] ? __wake_up_common_lock+0xde/0x130 [ 313.772952][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 313.776815][ C0] lock_acquire+0x1ab/0x570 [ 313.779887][ C0] ? p9_req_put+0xc6/0x250 [ 313.782809][ C0] ? lock_release+0x780/0x780 [ 313.787182][ C0] ? __wake_up_common_lock+0xde/0x130 [ 313.791890][ C0] ? __wake_up_common+0x650/0x650 [ 313.795475][ C0] _raw_spin_lock_irqsave+0x39/0x50 [ 313.798870][ C0] ? p9_req_put+0xc6/0x250 [ 313.801648][ C0] p9_req_put+0xc6/0x250 [ 313.804278][ C0] req_done+0x1de/0x2e0 [ 313.806951][ C0] ? p9_virtio_remove+0x420/0x420 [ 313.810316][ C0] ? p9_virtio_remove+0x420/0x420 [ 313.813447][ C0] vring_interrupt+0x29d/0x3d0 [ 313.816469][ C0] ? virtqueue_poll+0x290/0x290 [ 313.819814][ C0] __handle_irq_event_percpu+0x227/0x870 [ 313.823526][ C0] handle_irq_event+0xa7/0x1e0 [ 313.826521][ C0] handle_edge_irq+0x25f/0xd00 [ 313.830009][ C0] __common_interrupt+0x9d/0x210 [ 313.832980][ C0] common_interrupt+0xa4/0xc0 [ 313.836328][ C0] [ 313.838258][ C0] [ 313.840602][ C0] asm_common_interrupt+0x22/0x40 [ 313.843956][ C0] RIP: 0010:write_comp_data+0x85/0x90 [ 313.847434][ C0] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 66 2e 0f 1f 84 00 00 00 00 00 48 8b 0c 24 40 0f b6 d6 40 0f b6 [ 313.860315][ C0] RSP: 0018:ffffc90002e9fd48 EFLAGS: 00000293 [ 313.864491][ C0] RAX: 0000000000000000 RBX: 0000000074a4fb33 RCX: ffffffff81fbeb37 [ 313.869951][ C0] RDX: ffff88801a814200 RSI: 0000000000000000 RDI: 0000000000000001 [ 313.875611][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 313.880991][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801c876d98 [ 313.886932][ C0] R13: ffff8880450712f8 R14: 0000000000000001 R15: ffffffff8a46d720 [ 313.893767][ C0] ? kernfs_dir_pos+0x37/0x2a0 [ 313.898126][ C0] kernfs_dir_pos+0x37/0x2a0 [ 313.902016][ C0] kernfs_fop_readdir+0x3e1/0x910 [ 313.906157][ C0] iterate_dir+0x56a/0x6f0 [ 313.910050][ C0] __x64_sys_getdents64+0x13a/0x2c0 [ 313.914723][ C0] ? __ia32_sys_getdents+0x2b0/0x2b0 [ 313.918979][ C0] ? compat_filldir+0x6e0/0x6e0 [ 313.922690][ C0] ? syscall_enter_from_user_mode+0x22/0xb0 [ 313.927122][ C0] ? syscall_enter_from_user_mode+0x22/0xb0 [ 313.931519][ C0] do_syscall_64+0x35/0xb0 [ 313.934825][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 313.939339][ C0] RIP: 0033:0x7f08794ff097 [ 313.942670][ C0] Code: 00 00 0f 05 eb b3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 81 fa ff ff ff 7f b8 ff ff ff 7f 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 b1 5d 0f 00 f7 d8 64 89 02 48 [ 313.956370][ C0] RSP: 002b:00007fff92f3ae18 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 313.961888][ C0] RAX: ffffffffffffffda RBX: 0000561813fc10a0 RCX: 00007f08794ff097 [ 313.967117][ C0] RDX: 0000000000008000 RSI: 0000561813fc10d0 RDI: 000000000000000c [ 313.972454][ C0] RBP: 0000561813fc10d0 R08: 0000000000000030 R09: 00007f08795f5a60 [ 313.977557][ C0] R10: 0000000000000020 R11: 0000000000000293 R12: fffffffffffffe68 [ 313.982742][ C0] R13: 0000561813fc10a4 R14: 0000000000000016 R15: 0000000000000000 [ 313.987539][ C0] [ 315.081334][ C0] Shutting down cpus with NMI [ 315.085607][ C0] Kernel Offset: disabled [ 315.088646][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:56:23 Registers: info registers vcpu 0 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8461c7c1 RDI=ffffffff91488000 RBP=ffffffff91487fc0 RSP=ffffc900000075c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000003043 R12=0000000000000000 R13=000000000000005d R14=ffffffff8461c760 R15=0000000000000000 RIP=ffffffff8461c7eb RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f087993e840 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555565ec708 CR3=000000001ba92000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000ff0000ff0000ff0000ff0000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffffffffffff000000ff0000 XMM06=ffffffffffffff00ffffff00000000ff XMM07=00000000000000000000000000000000 XMM08=2c363230300039323d5145534b534944 XMM09=00000000000000000000000000000000 XMM10=73737373737371f27373737373737373 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880268f4e80 RCX=0000000000000000 RDX=1ffff11004d1e9d6 RSI=ffffffff87e6625e RDI=ffff8880268f4eb0 RBP=ffff8880268f4eb0 RSP=ffffc90002e6fd48 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888068da6040 R13=ffff8880268f53a0 R14=ffff8880268f4e80 R15=ffffffff87e55610 RIP=ffffffff816577da RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555556195400 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6f5177e1b8 CR3=0000000068e0c000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000ffffffff0000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000001 RBX=1ffff92001aacf4a RCX=419af574f9fee4e2 RDX=1ffff1100d0b197e RSI=ffffffff89ec9580 RDI=ffffffff89ec9580 RBP=ffffffff89ec9580 RSP=ffffc9000d567a30 R8 =0000000000000000 R9 =ffffffff908e1947 R10=fffffbfff211c328 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=ffffffff8bf86900 R15=0000000000000000 RIP=ffffffff898018cc RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555556876400 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f369d983ef8 CR3=00000000506e9000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=ffff7fffffffffff RBX=ffffea000144b540 RCX=ffffffff81a751b8 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffea000144b540 RBP=ffffea000144b540 RSP=ffffc9000d5e75f0 R8 =0000000000000000 R9 =ffffea000144b547 R10=0000000000000000 R11=0000000000000000 R12=000000000d5e7a78 R13=dffffc0000000000 R14=ffffc9000d5e7a78 R15=0000000000000000 RIP=ffffffff81c6d984 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f76f9fad0b0 CR3=000000000bc8e000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f76f9f857c000007f76f9f857c8 XMM02=00007f76f9f857e000007f76f9f857c0 XMM03=00007f76f9f857c800007f76f9f857c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000