Warning: Permanently added '[localhost]:3638' (ECDSA) to the list of known hosts. [ 45.560646][ T39] audit: type=1400 audit(1661595107.319:75): avc: denied { execute } for pid=3580 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.574777][ T39] audit: type=1400 audit(1661595107.319:76): avc: denied { execute_no_trans } for pid=3580 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/08/27 10:11:47 fuzzer started 2022/08/27 10:11:47 dialing manager at localhost:45677 [ 46.390010][ T39] audit: type=1400 audit(1661595108.149:77): avc: denied { mounton } for pid=3606 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.395693][ T3606] cgroup: Unknown subsys name 'net' [ 46.404870][ T39] audit: type=1400 audit(1661595108.149:78): avc: denied { mount } for pid=3606 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.422014][ T39] audit: type=1400 audit(1661595108.169:79): avc: denied { unmount } for pid=3606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.633172][ T3606] cgroup: Unknown subsys name 'rlimit' [ 46.741751][ T39] audit: type=1400 audit(1661595108.499:80): avc: denied { mounton } for pid=3606 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2022/08/27 10:11:48 syscalls: 3757 2022/08/27 10:11:48 code coverage: enabled 2022/08/27 10:11:48 comparison tracing: enabled 2022/08/27 10:11:48 extra coverage: enabled 2022/08/27 10:11:48 delay kcov mmap: enabled 2022/08/27 10:11:48 setuid sandbox: enabled 2022/08/27 10:11:48 namespace sandbox: enabled 2022/08/27 10:11:48 Android sandbox: enabled 2022/08/27 10:11:48 fault injection: enabled 2022/08/27 10:11:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/08/27 10:11:48 net packet injection: enabled 2022/08/27 10:11:48 net device setup: enabled 2022/08/27 10:11:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/08/27 10:11:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/08/27 10:11:48 USB emulation: enabled 2022/08/27 10:11:48 hci packet injection: enabled 2022/08/27 10:11:48 wifi device emulation: failed to parse kernel version (6.0.0-rc2-syzkaller-00248-ge022620b5d05) 2022/08/27 10:11:48 802.15.4 emulation: enabled 2022/08/27 10:11:48 fetching corpus: 0, signal 0/2000 (executing program) [ 46.757659][ T39] audit: type=1400 audit(1661595108.509:81): avc: denied { mount } for pid=3606 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 46.776282][ T39] audit: type=1400 audit(1661595108.509:82): avc: denied { setattr } for pid=3606 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2022/08/27 10:11:48 fetching corpus: 50, signal 41409/45165 (executing program) 2022/08/27 10:11:48 fetching corpus: 100, signal 65517/70915 (executing program) 2022/08/27 10:11:49 fetching corpus: 150, signal 74114/81227 (executing program) 2022/08/27 10:11:49 fetching corpus: 200, signal 82061/90812 (executing program) 2022/08/27 10:11:49 fetching corpus: 250, signal 91110/101456 (executing program) 2022/08/27 10:11:49 fetching corpus: 300, signal 100048/111928 (executing program) 2022/08/27 10:11:49 fetching corpus: 350, signal 108600/121967 (executing program) 2022/08/27 10:11:49 fetching corpus: 400, signal 113802/128680 (executing program) 2022/08/27 10:11:50 fetching corpus: 450, signal 120900/137199 (executing program) 2022/08/27 10:11:50 fetching corpus: 500, signal 127805/145567 (executing program) 2022/08/27 10:11:50 fetching corpus: 550, signal 134333/153469 (executing program) 2022/08/27 10:11:50 fetching corpus: 600, signal 141073/161555 (executing program) 2022/08/27 10:11:50 fetching corpus: 650, signal 146342/168158 (executing program) 2022/08/27 10:11:51 fetching corpus: 700, signal 151983/175112 (executing program) 2022/08/27 10:11:51 fetching corpus: 750, signal 156484/180944 (executing program) 2022/08/27 10:11:51 fetching corpus: 800, signal 161854/187560 (executing program) 2022/08/27 10:11:51 fetching corpus: 850, signal 164373/191440 (executing program) 2022/08/27 10:11:51 fetching corpus: 900, signal 167686/196039 (executing program) 2022/08/27 10:11:51 fetching corpus: 950, signal 171296/200900 (executing program) 2022/08/27 10:11:51 fetching corpus: 1000, signal 175171/205999 (executing program) 2022/08/27 10:11:52 fetching corpus: 1050, signal 180465/212422 (executing program) 2022/08/27 10:11:52 fetching corpus: 1100, signal 184159/217292 (executing program) 2022/08/27 10:11:52 fetching corpus: 1150, signal 185983/220414 (executing program) 2022/08/27 10:11:52 fetching corpus: 1200, signal 189018/224666 (executing program) 2022/08/27 10:11:52 fetching corpus: 1250, signal 191444/228325 (executing program) 2022/08/27 10:11:52 fetching corpus: 1300, signal 194282/232368 (executing program) 2022/08/27 10:11:53 fetching corpus: 1350, signal 197631/236827 (executing program) 2022/08/27 10:11:53 fetching corpus: 1400, signal 199664/240096 (executing program) 2022/08/27 10:11:53 fetching corpus: 1450, signal 202998/244536 (executing program) 2022/08/27 10:11:53 fetching corpus: 1500, signal 206446/249025 (executing program) 2022/08/27 10:11:53 fetching corpus: 1550, signal 209000/252745 (executing program) 2022/08/27 10:11:54 fetching corpus: 1600, signal 211714/256526 (executing program) 2022/08/27 10:11:54 fetching corpus: 1650, signal 214359/260242 (executing program) 2022/08/27 10:11:54 fetching corpus: 1700, signal 216285/263281 (executing program) 2022/08/27 10:11:54 fetching corpus: 1750, signal 218021/266166 (executing program) 2022/08/27 10:11:54 fetching corpus: 1800, signal 220343/269572 (executing program) 2022/08/27 10:11:54 fetching corpus: 1850, signal 222027/272432 (executing program) 2022/08/27 10:11:55 fetching corpus: 1900, signal 224424/275861 (executing program) 2022/08/27 10:11:55 fetching corpus: 1950, signal 226256/278827 (executing program) 2022/08/27 10:11:55 fetching corpus: 2000, signal 228536/282146 (executing program) 2022/08/27 10:11:55 fetching corpus: 2050, signal 231155/285717 (executing program) 2022/08/27 10:11:56 fetching corpus: 2100, signal 234045/289508 (executing program) 2022/08/27 10:11:56 fetching corpus: 2150, signal 237420/293696 (executing program) 2022/08/27 10:11:56 fetching corpus: 2200, signal 239587/296801 (executing program) 2022/08/27 10:11:56 fetching corpus: 2250, signal 241383/299638 (executing program) 2022/08/27 10:11:56 fetching corpus: 2300, signal 242724/302092 (executing program) 2022/08/27 10:11:57 fetching corpus: 2350, signal 244498/304840 (executing program) 2022/08/27 10:11:57 fetching corpus: 2400, signal 245582/307040 (executing program) 2022/08/27 10:11:57 fetching corpus: 2450, signal 246986/309478 (executing program) 2022/08/27 10:11:57 fetching corpus: 2500, signal 248317/311831 (executing program) 2022/08/27 10:11:57 fetching corpus: 2550, signal 250178/314632 (executing program) 2022/08/27 10:11:57 fetching corpus: 2600, signal 251446/316973 (executing program) 2022/08/27 10:11:58 fetching corpus: 2650, signal 253285/319755 (executing program) 2022/08/27 10:11:58 fetching corpus: 2700, signal 254607/322074 (executing program) 2022/08/27 10:11:58 fetching corpus: 2750, signal 256088/324508 (executing program) 2022/08/27 10:11:58 fetching corpus: 2800, signal 257195/326606 (executing program) 2022/08/27 10:11:58 fetching corpus: 2850, signal 258426/328822 (executing program) 2022/08/27 10:11:58 fetching corpus: 2900, signal 260490/331672 (executing program) 2022/08/27 10:11:59 fetching corpus: 2950, signal 262484/334526 (executing program) 2022/08/27 10:11:59 fetching corpus: 3000, signal 264642/337500 (executing program) 2022/08/27 10:11:59 fetching corpus: 3050, signal 266230/339947 (executing program) 2022/08/27 10:11:59 fetching corpus: 3100, signal 267572/342200 (executing program) 2022/08/27 10:11:59 fetching corpus: 3150, signal 269570/344957 (executing program) 2022/08/27 10:11:59 fetching corpus: 3200, signal 271107/347344 (executing program) 2022/08/27 10:12:00 fetching corpus: 3250, signal 272651/349723 (executing program) 2022/08/27 10:12:00 fetching corpus: 3300, signal 274193/352126 (executing program) 2022/08/27 10:12:00 fetching corpus: 3350, signal 275414/354260 (executing program) 2022/08/27 10:12:00 fetching corpus: 3400, signal 277268/356858 (executing program) 2022/08/27 10:12:00 fetching corpus: 3450, signal 278519/359003 (executing program) 2022/08/27 10:12:00 fetching corpus: 3500, signal 280623/361767 (executing program) 2022/08/27 10:12:00 fetching corpus: 3550, signal 281839/363881 (executing program) 2022/08/27 10:12:01 fetching corpus: 3600, signal 282945/365881 (executing program) 2022/08/27 10:12:01 fetching corpus: 3650, signal 284878/368555 (executing program) 2022/08/27 10:12:01 fetching corpus: 3700, signal 285923/370487 (executing program) 2022/08/27 10:12:01 fetching corpus: 3750, signal 287123/372477 (executing program) 2022/08/27 10:12:01 fetching corpus: 3800, signal 289293/375281 (executing program) 2022/08/27 10:12:02 fetching corpus: 3850, signal 290825/377576 (executing program) 2022/08/27 10:12:02 fetching corpus: 3900, signal 292004/379565 (executing program) 2022/08/27 10:12:02 fetching corpus: 3950, signal 293317/381700 (executing program) 2022/08/27 10:12:02 fetching corpus: 4000, signal 294707/383840 (executing program) 2022/08/27 10:12:02 fetching corpus: 4050, signal 295359/385433 (executing program) 2022/08/27 10:12:02 fetching corpus: 4100, signal 296596/387437 (executing program) 2022/08/27 10:12:03 fetching corpus: 4150, signal 297790/389411 (executing program) 2022/08/27 10:12:03 fetching corpus: 4200, signal 298782/391219 (executing program) 2022/08/27 10:12:03 fetching corpus: 4250, signal 299912/393166 (executing program) 2022/08/27 10:12:03 fetching corpus: 4300, signal 300963/395026 (executing program) 2022/08/27 10:12:03 fetching corpus: 4350, signal 302286/397078 (executing program) 2022/08/27 10:12:04 fetching corpus: 4400, signal 303543/399060 (executing program) 2022/08/27 10:12:04 fetching corpus: 4450, signal 304627/400913 (executing program) 2022/08/27 10:12:04 fetching corpus: 4500, signal 305898/402900 (executing program) 2022/08/27 10:12:04 fetching corpus: 4550, signal 307410/405115 (executing program) 2022/08/27 10:12:05 fetching corpus: 4600, signal 309015/407353 (executing program) 2022/08/27 10:12:05 fetching corpus: 4650, signal 310587/409511 (executing program) 2022/08/27 10:12:05 fetching corpus: 4700, signal 311689/411308 (executing program) 2022/08/27 10:12:05 fetching corpus: 4750, signal 313186/413371 (executing program) 2022/08/27 10:12:05 fetching corpus: 4800, signal 314139/415117 (executing program) 2022/08/27 10:12:05 fetching corpus: 4850, signal 314972/416736 (executing program) 2022/08/27 10:12:06 fetching corpus: 4900, signal 316236/418654 (executing program) 2022/08/27 10:12:06 fetching corpus: 4949, signal 317072/420248 (executing program) 2022/08/27 10:12:06 fetching corpus: 4999, signal 318333/422153 (executing program) 2022/08/27 10:12:06 fetching corpus: 5049, signal 319610/424067 (executing program) 2022/08/27 10:12:06 fetching corpus: 5099, signal 321490/426409 (executing program) 2022/08/27 10:12:07 fetching corpus: 5149, signal 322501/428104 (executing program) 2022/08/27 10:12:07 fetching corpus: 5199, signal 323518/429785 (executing program) 2022/08/27 10:12:07 fetching corpus: 5249, signal 324982/431805 (executing program) 2022/08/27 10:12:07 fetching corpus: 5299, signal 325839/433411 (executing program) 2022/08/27 10:12:07 fetching corpus: 5349, signal 327145/435323 (executing program) 2022/08/27 10:12:08 fetching corpus: 5399, signal 328116/436939 (executing program) 2022/08/27 10:12:08 fetching corpus: 5449, signal 328858/438432 (executing program) 2022/08/27 10:12:08 fetching corpus: 5499, signal 329936/440141 (executing program) 2022/08/27 10:12:08 fetching corpus: 5549, signal 331222/441986 (executing program) 2022/08/27 10:12:08 fetching corpus: 5599, signal 332114/443535 (executing program) 2022/08/27 10:12:09 fetching corpus: 5649, signal 333300/445275 (executing program) 2022/08/27 10:12:09 fetching corpus: 5699, signal 334894/447286 (executing program) 2022/08/27 10:12:09 fetching corpus: 5749, signal 336434/449266 (executing program) 2022/08/27 10:12:10 fetching corpus: 5799, signal 337644/450978 (executing program) 2022/08/27 10:12:10 fetching corpus: 5849, signal 338547/452534 (executing program) 2022/08/27 10:12:10 fetching corpus: 5899, signal 339633/454189 (executing program) 2022/08/27 10:12:11 fetching corpus: 5949, signal 340446/455638 (executing program) 2022/08/27 10:12:11 fetching corpus: 5999, signal 341568/457286 (executing program) 2022/08/27 10:12:11 fetching corpus: 6049, signal 342237/458661 (executing program) 2022/08/27 10:12:11 fetching corpus: 6099, signal 343416/460335 (executing program) 2022/08/27 10:12:11 fetching corpus: 6149, signal 345179/462338 (executing program) 2022/08/27 10:12:12 fetching corpus: 6199, signal 346142/463881 (executing program) 2022/08/27 10:12:12 fetching corpus: 6249, signal 347121/465400 (executing program) 2022/08/27 10:12:12 fetching corpus: 6299, signal 348229/466995 (executing program) 2022/08/27 10:12:12 fetching corpus: 6349, signal 349601/468802 (executing program) 2022/08/27 10:12:13 fetching corpus: 6399, signal 350374/470145 (executing program) 2022/08/27 10:12:13 fetching corpus: 6449, signal 351236/471583 (executing program) 2022/08/27 10:12:13 fetching corpus: 6499, signal 352162/473089 (executing program) 2022/08/27 10:12:13 fetching corpus: 6549, signal 353065/474549 (executing program) 2022/08/27 10:12:13 fetching corpus: 6599, signal 354104/476102 (executing program) 2022/08/27 10:12:13 fetching corpus: 6649, signal 354868/477421 (executing program) [ 72.257135][ T1350] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.261672][ T1350] ieee802154 phy1 wpan1: encryption failed: -22 2022/08/27 10:12:14 fetching corpus: 6699, signal 355585/478830 (executing program) 2022/08/27 10:12:14 fetching corpus: 6749, signal 356395/480215 (executing program) 2022/08/27 10:12:14 fetching corpus: 6799, signal 357131/481534 (executing program) 2022/08/27 10:12:14 fetching corpus: 6849, signal 357917/482888 (executing program) 2022/08/27 10:12:14 fetching corpus: 6899, signal 358605/484181 (executing program) 2022/08/27 10:12:14 fetching corpus: 6949, signal 359407/485486 (executing program) 2022/08/27 10:12:15 fetching corpus: 6999, signal 360272/486868 (executing program) 2022/08/27 10:12:15 fetching corpus: 7049, signal 361038/488194 (executing program) 2022/08/27 10:12:15 fetching corpus: 7099, signal 361946/489617 (executing program) 2022/08/27 10:12:15 fetching corpus: 7149, signal 362912/491077 (executing program) 2022/08/27 10:12:15 fetching corpus: 7199, signal 363839/492487 (executing program) 2022/08/27 10:12:15 fetching corpus: 7249, signal 364755/493804 (executing program) 2022/08/27 10:12:16 fetching corpus: 7299, signal 365370/495008 (executing program) 2022/08/27 10:12:16 fetching corpus: 7349, signal 366043/496218 (executing program) 2022/08/27 10:12:16 fetching corpus: 7399, signal 366747/497459 (executing program) 2022/08/27 10:12:16 fetching corpus: 7449, signal 367591/498744 (executing program) 2022/08/27 10:12:16 fetching corpus: 7499, signal 368404/500055 (executing program) 2022/08/27 10:12:16 fetching corpus: 7549, signal 369185/501339 (executing program) 2022/08/27 10:12:17 fetching corpus: 7599, signal 369982/502631 (executing program) 2022/08/27 10:12:17 fetching corpus: 7649, signal 370853/503984 (executing program) 2022/08/27 10:12:17 fetching corpus: 7699, signal 371602/505279 (executing program) 2022/08/27 10:12:17 fetching corpus: 7749, signal 372545/506643 (executing program) 2022/08/27 10:12:17 fetching corpus: 7799, signal 373218/507834 (executing program) 2022/08/27 10:12:18 fetching corpus: 7849, signal 374017/509098 (executing program) 2022/08/27 10:12:18 fetching corpus: 7899, signal 374780/510371 (executing program) 2022/08/27 10:12:18 fetching corpus: 7949, signal 375618/511660 (executing program) 2022/08/27 10:12:18 fetching corpus: 7999, signal 376592/512979 (executing program) 2022/08/27 10:12:18 fetching corpus: 8049, signal 377013/514023 (executing program) 2022/08/27 10:12:19 fetching corpus: 8099, signal 377854/515272 (executing program) 2022/08/27 10:12:19 fetching corpus: 8149, signal 378582/516457 (executing program) 2022/08/27 10:12:19 fetching corpus: 8199, signal 379508/517736 (executing program) 2022/08/27 10:12:19 fetching corpus: 8249, signal 380349/519049 (executing program) 2022/08/27 10:12:19 fetching corpus: 8299, signal 381095/520262 (executing program) 2022/08/27 10:12:20 fetching corpus: 8349, signal 381899/521470 (executing program) 2022/08/27 10:12:20 fetching corpus: 8399, signal 383130/522948 (executing program) 2022/08/27 10:12:20 fetching corpus: 8449, signal 383795/524078 (executing program) 2022/08/27 10:12:20 fetching corpus: 8499, signal 384865/525437 (executing program) 2022/08/27 10:12:20 fetching corpus: 8549, signal 386181/526837 (executing program) 2022/08/27 10:12:20 fetching corpus: 8599, signal 387112/528121 (executing program) 2022/08/27 10:12:21 fetching corpus: 8649, signal 387925/529301 (executing program) 2022/08/27 10:12:21 fetching corpus: 8699, signal 388436/530340 (executing program) 2022/08/27 10:12:21 fetching corpus: 8749, signal 389331/531582 (executing program) 2022/08/27 10:12:21 fetching corpus: 8799, signal 390065/532705 (executing program) 2022/08/27 10:12:21 fetching corpus: 8849, signal 390715/533806 (executing program) 2022/08/27 10:12:21 fetching corpus: 8899, signal 391209/534843 (executing program) 2022/08/27 10:12:22 fetching corpus: 8949, signal 392169/536105 (executing program) 2022/08/27 10:12:22 fetching corpus: 8999, signal 392851/537245 (executing program) 2022/08/27 10:12:22 fetching corpus: 9049, signal 393415/538292 (executing program) 2022/08/27 10:12:22 fetching corpus: 9099, signal 393957/539332 (executing program) 2022/08/27 10:12:23 fetching corpus: 9149, signal 394679/540457 (executing program) 2022/08/27 10:12:23 fetching corpus: 9199, signal 395449/541624 (executing program) 2022/08/27 10:12:23 fetching corpus: 9249, signal 396038/542651 (executing program) 2022/08/27 10:12:23 fetching corpus: 9299, signal 396754/543744 (executing program) 2022/08/27 10:12:23 fetching corpus: 9349, signal 397363/544763 (executing program) 2022/08/27 10:12:23 fetching corpus: 9399, signal 397941/545781 (executing program) 2022/08/27 10:12:24 fetching corpus: 9449, signal 398679/546865 (executing program) 2022/08/27 10:12:24 fetching corpus: 9499, signal 399474/547976 (executing program) 2022/08/27 10:12:24 fetching corpus: 9549, signal 399975/548968 (executing program) 2022/08/27 10:12:24 fetching corpus: 9599, signal 401052/550208 (executing program) 2022/08/27 10:12:24 fetching corpus: 9649, signal 401672/551208 (executing program) 2022/08/27 10:12:24 fetching corpus: 9699, signal 402377/552284 (executing program) 2022/08/27 10:12:25 fetching corpus: 9749, signal 403134/553379 (executing program) 2022/08/27 10:12:25 fetching corpus: 9799, signal 403825/554394 (executing program) 2022/08/27 10:12:25 fetching corpus: 9849, signal 404543/555459 (executing program) 2022/08/27 10:12:25 fetching corpus: 9899, signal 405381/556524 (executing program) 2022/08/27 10:12:26 fetching corpus: 9949, signal 406174/557579 (executing program) 2022/08/27 10:12:26 fetching corpus: 9999, signal 406632/558484 (executing program) 2022/08/27 10:12:26 fetching corpus: 10049, signal 407171/559459 (executing program) 2022/08/27 10:12:27 fetching corpus: 10099, signal 408081/560575 (executing program) 2022/08/27 10:12:27 fetching corpus: 10149, signal 408686/561526 (executing program) 2022/08/27 10:12:27 fetching corpus: 10199, signal 409280/562524 (executing program) 2022/08/27 10:12:27 fetching corpus: 10249, signal 409835/563512 (executing program) 2022/08/27 10:12:27 fetching corpus: 10299, signal 410601/564514 (executing program) 2022/08/27 10:12:27 fetching corpus: 10349, signal 411133/565470 (executing program) 2022/08/27 10:12:28 fetching corpus: 10399, signal 411569/566367 (executing program) 2022/08/27 10:12:28 fetching corpus: 10449, signal 412052/567246 (executing program) 2022/08/27 10:12:28 fetching corpus: 10499, signal 412715/568234 (executing program) 2022/08/27 10:12:28 fetching corpus: 10549, signal 413398/569180 (executing program) 2022/08/27 10:12:28 fetching corpus: 10599, signal 413926/570128 (executing program) 2022/08/27 10:12:29 fetching corpus: 10649, signal 414646/571104 (executing program) 2022/08/27 10:12:29 fetching corpus: 10699, signal 415484/572129 (executing program) [ 87.617716][ T171] cfg80211: failed to load regulatory.db 2022/08/27 10:12:29 fetching corpus: 10749, signal 416324/573096 (executing program) 2022/08/27 10:12:29 fetching corpus: 10799, signal 416841/573964 (executing program) 2022/08/27 10:12:29 fetching corpus: 10849, signal 417426/574862 (executing program) 2022/08/27 10:12:30 fetching corpus: 10899, signal 417915/575780 (executing program) 2022/08/27 10:12:30 fetching corpus: 10949, signal 418416/576678 (executing program) 2022/08/27 10:12:30 fetching corpus: 10999, signal 418831/577569 (executing program) 2022/08/27 10:12:30 fetching corpus: 11049, signal 419391/578422 (executing program) 2022/08/27 10:12:30 fetching corpus: 11099, signal 420003/579366 (executing program) 2022/08/27 10:12:30 fetching corpus: 11149, signal 420581/580286 (executing program) 2022/08/27 10:12:31 fetching corpus: 11199, signal 421242/581196 (executing program) 2022/08/27 10:12:31 fetching corpus: 11249, signal 421794/582097 (executing program) 2022/08/27 10:12:31 fetching corpus: 11299, signal 422182/582911 (executing program) 2022/08/27 10:12:31 fetching corpus: 11349, signal 422756/583790 (executing program) 2022/08/27 10:12:31 fetching corpus: 11399, signal 423316/584669 (executing program) 2022/08/27 10:12:31 fetching corpus: 11449, signal 423940/585504 (executing program) 2022/08/27 10:12:32 fetching corpus: 11499, signal 424484/586368 (executing program) 2022/08/27 10:12:32 fetching corpus: 11549, signal 425068/587244 (executing program) 2022/08/27 10:12:32 fetching corpus: 11599, signal 425918/588204 (executing program) 2022/08/27 10:12:32 fetching corpus: 11649, signal 426489/589074 (executing program) 2022/08/27 10:12:32 fetching corpus: 11699, signal 427147/589972 (executing program) 2022/08/27 10:12:33 fetching corpus: 11749, signal 427581/590800 (executing program) 2022/08/27 10:12:33 fetching corpus: 11799, signal 428087/591653 (executing program) 2022/08/27 10:12:33 fetching corpus: 11849, signal 428786/592553 (executing program) 2022/08/27 10:12:33 fetching corpus: 11899, signal 429186/593331 (executing program) 2022/08/27 10:12:34 fetching corpus: 11949, signal 429695/594134 (executing program) 2022/08/27 10:12:34 fetching corpus: 11999, signal 430267/594966 (executing program) 2022/08/27 10:12:34 fetching corpus: 12049, signal 430799/595751 (executing program) 2022/08/27 10:12:34 fetching corpus: 12099, signal 431417/596608 (executing program) 2022/08/27 10:12:34 fetching corpus: 12149, signal 432079/597414 (executing program) 2022/08/27 10:12:35 fetching corpus: 12199, signal 432755/598258 (executing program) 2022/08/27 10:12:35 fetching corpus: 12249, signal 433212/599040 (executing program) 2022/08/27 10:12:35 fetching corpus: 12299, signal 433805/599860 (executing program) 2022/08/27 10:12:35 fetching corpus: 12349, signal 434631/600707 (executing program) 2022/08/27 10:12:35 fetching corpus: 12399, signal 435198/601552 (executing program) 2022/08/27 10:12:36 fetching corpus: 12449, signal 435570/602338 (executing program) 2022/08/27 10:12:36 fetching corpus: 12499, signal 436065/603146 (executing program) 2022/08/27 10:12:36 fetching corpus: 12549, signal 436786/603998 (executing program) 2022/08/27 10:12:36 fetching corpus: 12599, signal 437417/604771 (executing program) 2022/08/27 10:12:36 fetching corpus: 12649, signal 437976/605610 (executing program) 2022/08/27 10:12:37 fetching corpus: 12699, signal 438592/606414 (executing program) 2022/08/27 10:12:37 fetching corpus: 12749, signal 439116/607167 (executing program) 2022/08/27 10:12:37 fetching corpus: 12799, signal 439838/607949 (executing program) 2022/08/27 10:12:38 fetching corpus: 12849, signal 440561/608740 (executing program) 2022/08/27 10:12:38 fetching corpus: 12899, signal 440996/609496 (executing program) 2022/08/27 10:12:38 fetching corpus: 12949, signal 441464/610239 (executing program) 2022/08/27 10:12:39 fetching corpus: 12999, signal 441970/610993 (executing program) 2022/08/27 10:12:39 fetching corpus: 13049, signal 442582/611720 (executing program) 2022/08/27 10:12:39 fetching corpus: 13099, signal 443067/612436 (executing program) 2022/08/27 10:12:39 fetching corpus: 13149, signal 443537/613130 (executing program) 2022/08/27 10:12:40 fetching corpus: 13199, signal 443929/613876 (executing program) 2022/08/27 10:12:40 fetching corpus: 13249, signal 444349/614581 (executing program) 2022/08/27 10:12:40 fetching corpus: 13299, signal 445144/615382 (executing program) 2022/08/27 10:12:41 fetching corpus: 13349, signal 445577/616111 (executing program) 2022/08/27 10:12:41 fetching corpus: 13399, signal 446034/616811 (executing program) 2022/08/27 10:12:41 fetching corpus: 13449, signal 446668/617594 (executing program) 2022/08/27 10:12:41 fetching corpus: 13499, signal 447417/618384 (executing program) 2022/08/27 10:12:41 fetching corpus: 13549, signal 447969/619132 (executing program) 2022/08/27 10:12:41 fetching corpus: 13599, signal 448511/619826 (executing program) 2022/08/27 10:12:42 fetching corpus: 13649, signal 449052/620562 (executing program) 2022/08/27 10:12:42 fetching corpus: 13699, signal 449573/621314 (executing program) 2022/08/27 10:12:42 fetching corpus: 13749, signal 450025/621966 (executing program) 2022/08/27 10:12:42 fetching corpus: 13799, signal 450472/622680 (executing program) 2022/08/27 10:12:42 fetching corpus: 13849, signal 451378/623437 (executing program) 2022/08/27 10:12:43 fetching corpus: 13899, signal 452098/624148 (executing program) 2022/08/27 10:12:43 fetching corpus: 13949, signal 452807/624857 (executing program) 2022/08/27 10:12:43 fetching corpus: 13999, signal 453202/625565 (executing program) 2022/08/27 10:12:44 fetching corpus: 14049, signal 453661/626203 (executing program) 2022/08/27 10:12:44 fetching corpus: 14099, signal 454238/626863 (executing program) 2022/08/27 10:12:44 fetching corpus: 14149, signal 454679/627521 (executing program) 2022/08/27 10:12:44 fetching corpus: 14199, signal 455262/628188 (executing program) 2022/08/27 10:12:44 fetching corpus: 14249, signal 455815/628826 (executing program) 2022/08/27 10:12:45 fetching corpus: 14299, signal 456337/629467 (executing program) 2022/08/27 10:12:45 fetching corpus: 14349, signal 456965/630146 (executing program) 2022/08/27 10:12:45 fetching corpus: 14399, signal 457410/630752 (executing program) 2022/08/27 10:12:45 fetching corpus: 14449, signal 457904/631363 (executing program) 2022/08/27 10:12:45 fetching corpus: 14499, signal 458346/632009 (executing program) 2022/08/27 10:12:45 fetching corpus: 14549, signal 458806/632715 (executing program) 2022/08/27 10:12:46 fetching corpus: 14599, signal 459175/633304 (executing program) 2022/08/27 10:12:46 fetching corpus: 14649, signal 459512/633939 (executing program) 2022/08/27 10:12:46 fetching corpus: 14699, signal 460039/634637 (executing program) 2022/08/27 10:12:46 fetching corpus: 14749, signal 460419/635272 (executing program) 2022/08/27 10:12:46 fetching corpus: 14799, signal 460698/635938 (executing program) 2022/08/27 10:12:47 fetching corpus: 14849, signal 461060/636582 (executing program) 2022/08/27 10:12:47 fetching corpus: 14899, signal 461425/637228 (executing program) 2022/08/27 10:12:47 fetching corpus: 14949, signal 461879/637845 (executing program) 2022/08/27 10:12:47 fetching corpus: 14999, signal 462474/638475 (executing program) 2022/08/27 10:12:47 fetching corpus: 15049, signal 463216/639134 (executing program) 2022/08/27 10:12:48 fetching corpus: 15099, signal 463716/639759 (executing program) 2022/08/27 10:12:48 fetching corpus: 15149, signal 464065/640374 (executing program) 2022/08/27 10:12:48 fetching corpus: 15199, signal 464466/640973 (executing program) 2022/08/27 10:12:48 fetching corpus: 15249, signal 464995/641547 (executing program) 2022/08/27 10:12:48 fetching corpus: 15299, signal 465442/642166 (executing program) 2022/08/27 10:12:48 fetching corpus: 15349, signal 466010/642748 (executing program) 2022/08/27 10:12:49 fetching corpus: 15399, signal 466527/643338 (executing program) 2022/08/27 10:12:49 fetching corpus: 15449, signal 466918/643941 (executing program) 2022/08/27 10:12:49 fetching corpus: 15499, signal 467382/644522 (executing program) 2022/08/27 10:12:49 fetching corpus: 15549, signal 467708/645120 (executing program) 2022/08/27 10:12:49 fetching corpus: 15599, signal 468245/645682 (executing program) 2022/08/27 10:12:50 fetching corpus: 15649, signal 468608/646261 (executing program) 2022/08/27 10:12:50 fetching corpus: 15699, signal 469131/646829 (executing program) 2022/08/27 10:12:50 fetching corpus: 15749, signal 469601/647377 (executing program) 2022/08/27 10:12:50 fetching corpus: 15799, signal 469952/647972 (executing program) 2022/08/27 10:12:50 fetching corpus: 15849, signal 470883/648541 (executing program) 2022/08/27 10:12:51 fetching corpus: 15899, signal 471303/649098 (executing program) 2022/08/27 10:12:51 fetching corpus: 15949, signal 471984/649662 (executing program) 2022/08/27 10:12:51 fetching corpus: 15999, signal 472304/650211 (executing program) 2022/08/27 10:12:51 fetching corpus: 16049, signal 472774/650779 (executing program) 2022/08/27 10:12:51 fetching corpus: 16099, signal 473067/651352 (executing program) 2022/08/27 10:12:52 fetching corpus: 16149, signal 473562/651896 (executing program) 2022/08/27 10:12:52 fetching corpus: 16199, signal 473949/652471 (executing program) 2022/08/27 10:12:52 fetching corpus: 16249, signal 474296/653061 (executing program) 2022/08/27 10:12:52 fetching corpus: 16299, signal 474645/653490 (executing program) 2022/08/27 10:12:52 fetching corpus: 16349, signal 474937/653490 (executing program) 2022/08/27 10:12:52 fetching corpus: 16399, signal 475551/653490 (executing program) 2022/08/27 10:12:53 fetching corpus: 16449, signal 475965/653490 (executing program) 2022/08/27 10:12:53 fetching corpus: 16499, signal 476396/653490 (executing program) 2022/08/27 10:12:53 fetching corpus: 16549, signal 476734/653490 (executing program) 2022/08/27 10:12:53 fetching corpus: 16599, signal 477124/653490 (executing program) 2022/08/27 10:12:53 fetching corpus: 16649, signal 477561/653490 (executing program) 2022/08/27 10:12:53 fetching corpus: 16699, signal 477934/653490 (executing program) 2022/08/27 10:12:54 fetching corpus: 16749, signal 478267/653493 (executing program) 2022/08/27 10:12:54 fetching corpus: 16799, signal 479470/653493 (executing program) 2022/08/27 10:12:54 fetching corpus: 16849, signal 479937/653493 (executing program) 2022/08/27 10:12:55 fetching corpus: 16899, signal 480432/653496 (executing program) 2022/08/27 10:12:55 fetching corpus: 16949, signal 480816/653496 (executing program) 2022/08/27 10:12:55 fetching corpus: 16999, signal 481244/653498 (executing program) 2022/08/27 10:12:55 fetching corpus: 17049, signal 481586/653499 (executing program) 2022/08/27 10:12:55 fetching corpus: 17099, signal 481931/653499 (executing program) 2022/08/27 10:12:55 fetching corpus: 17149, signal 482425/653499 (executing program) 2022/08/27 10:12:56 fetching corpus: 17199, signal 482936/653499 (executing program) 2022/08/27 10:12:56 fetching corpus: 17249, signal 483291/653502 (executing program) 2022/08/27 10:12:56 fetching corpus: 17299, signal 483858/653502 (executing program) 2022/08/27 10:12:56 fetching corpus: 17349, signal 484202/653502 (executing program) 2022/08/27 10:12:56 fetching corpus: 17399, signal 484557/653502 (executing program) 2022/08/27 10:12:57 fetching corpus: 17449, signal 485012/653502 (executing program) 2022/08/27 10:12:57 fetching corpus: 17499, signal 485464/653502 (executing program) 2022/08/27 10:12:57 fetching corpus: 17549, signal 485927/653502 (executing program) 2022/08/27 10:12:57 fetching corpus: 17599, signal 486360/653502 (executing program) 2022/08/27 10:12:57 fetching corpus: 17649, signal 486770/653502 (executing program) 2022/08/27 10:12:58 fetching corpus: 17699, signal 487048/653502 (executing program) 2022/08/27 10:12:58 fetching corpus: 17749, signal 487551/653502 (executing program) 2022/08/27 10:12:58 fetching corpus: 17799, signal 487923/653506 (executing program) 2022/08/27 10:12:58 fetching corpus: 17849, signal 488313/653506 (executing program) 2022/08/27 10:12:59 fetching corpus: 17899, signal 488637/653506 (executing program) 2022/08/27 10:12:59 fetching corpus: 17949, signal 489148/653506 (executing program) 2022/08/27 10:12:59 fetching corpus: 17999, signal 489575/653507 (executing program) 2022/08/27 10:12:59 fetching corpus: 18049, signal 489925/653508 (executing program) 2022/08/27 10:12:59 fetching corpus: 18099, signal 490314/653516 (executing program) 2022/08/27 10:12:59 fetching corpus: 18149, signal 490727/653516 (executing program) 2022/08/27 10:13:00 fetching corpus: 18199, signal 491131/653516 (executing program) 2022/08/27 10:13:00 fetching corpus: 18249, signal 491509/653516 (executing program) 2022/08/27 10:13:00 fetching corpus: 18299, signal 491980/653516 (executing program) 2022/08/27 10:13:00 fetching corpus: 18349, signal 492468/653516 (executing program) 2022/08/27 10:13:00 fetching corpus: 18399, signal 493030/653516 (executing program) 2022/08/27 10:13:01 fetching corpus: 18449, signal 493381/653516 (executing program) 2022/08/27 10:13:01 fetching corpus: 18499, signal 493883/653516 (executing program) 2022/08/27 10:13:01 fetching corpus: 18549, signal 494422/653516 (executing program) 2022/08/27 10:13:01 fetching corpus: 18599, signal 496000/653516 (executing program) 2022/08/27 10:13:01 fetching corpus: 18649, signal 496379/653518 (executing program) 2022/08/27 10:13:02 fetching corpus: 18699, signal 496703/653518 (executing program) 2022/08/27 10:13:02 fetching corpus: 18749, signal 497190/653518 (executing program) 2022/08/27 10:13:02 fetching corpus: 18799, signal 497798/653519 (executing program) 2022/08/27 10:13:02 fetching corpus: 18849, signal 498155/653519 (executing program) 2022/08/27 10:13:02 fetching corpus: 18899, signal 498431/653519 (executing program) 2022/08/27 10:13:02 fetching corpus: 18949, signal 499060/653519 (executing program) 2022/08/27 10:13:03 fetching corpus: 18999, signal 499639/653519 (executing program) 2022/08/27 10:13:03 fetching corpus: 19049, signal 499970/653525 (executing program) 2022/08/27 10:13:03 fetching corpus: 19099, signal 500366/653525 (executing program) 2022/08/27 10:13:03 fetching corpus: 19149, signal 500754/653525 (executing program) 2022/08/27 10:13:03 fetching corpus: 19199, signal 501073/653525 (executing program) 2022/08/27 10:13:04 fetching corpus: 19249, signal 501385/653525 (executing program) 2022/08/27 10:13:04 fetching corpus: 19299, signal 501752/653525 (executing program) 2022/08/27 10:13:04 fetching corpus: 19349, signal 502177/653525 (executing program) 2022/08/27 10:13:04 fetching corpus: 19399, signal 502563/653525 (executing program) 2022/08/27 10:13:04 fetching corpus: 19449, signal 502845/653525 (executing program) 2022/08/27 10:13:05 fetching corpus: 19499, signal 503226/653525 (executing program) 2022/08/27 10:13:05 fetching corpus: 19549, signal 503651/653528 (executing program) 2022/08/27 10:13:05 fetching corpus: 19599, signal 503916/653554 (executing program) 2022/08/27 10:13:05 fetching corpus: 19649, signal 504263/653554 (executing program) 2022/08/27 10:13:05 fetching corpus: 19699, signal 504822/653555 (executing program) 2022/08/27 10:13:05 fetching corpus: 19749, signal 505228/653555 (executing program) 2022/08/27 10:13:06 fetching corpus: 19799, signal 505708/653555 (executing program) 2022/08/27 10:13:06 fetching corpus: 19849, signal 506031/653559 (executing program) 2022/08/27 10:13:06 fetching corpus: 19899, signal 506413/653559 (executing program) 2022/08/27 10:13:06 fetching corpus: 19949, signal 506744/653559 (executing program) 2022/08/27 10:13:06 fetching corpus: 19999, signal 507038/653559 (executing program) 2022/08/27 10:13:06 fetching corpus: 20049, signal 507460/653559 (executing program) 2022/08/27 10:13:07 fetching corpus: 20099, signal 507877/653559 (executing program) 2022/08/27 10:13:07 fetching corpus: 20149, signal 508225/653559 (executing program) 2022/08/27 10:13:07 fetching corpus: 20199, signal 508628/653559 (executing program) 2022/08/27 10:13:07 fetching corpus: 20249, signal 509068/653560 (executing program) 2022/08/27 10:13:08 fetching corpus: 20299, signal 509512/653560 (executing program) 2022/08/27 10:13:08 fetching corpus: 20349, signal 509840/653560 (executing program) 2022/08/27 10:13:08 fetching corpus: 20399, signal 510135/653560 (executing program) 2022/08/27 10:13:08 fetching corpus: 20449, signal 510573/653560 (executing program) 2022/08/27 10:13:09 fetching corpus: 20499, signal 510907/653560 (executing program) 2022/08/27 10:13:09 fetching corpus: 20549, signal 511222/653560 (executing program) 2022/08/27 10:13:09 fetching corpus: 20599, signal 511722/653560 (executing program) 2022/08/27 10:13:09 fetching corpus: 20649, signal 512016/653560 (executing program) 2022/08/27 10:13:09 fetching corpus: 20699, signal 512511/653560 (executing program) 2022/08/27 10:13:10 fetching corpus: 20749, signal 513012/653562 (executing program) 2022/08/27 10:13:10 fetching corpus: 20799, signal 513366/653562 (executing program) 2022/08/27 10:13:10 fetching corpus: 20849, signal 513712/653562 (executing program) 2022/08/27 10:13:10 fetching corpus: 20899, signal 514051/653562 (executing program) 2022/08/27 10:13:10 fetching corpus: 20949, signal 514444/653562 (executing program) 2022/08/27 10:13:10 fetching corpus: 20999, signal 514858/653563 (executing program) 2022/08/27 10:13:11 fetching corpus: 21049, signal 515194/653563 (executing program) 2022/08/27 10:13:11 fetching corpus: 21099, signal 515676/653563 (executing program) 2022/08/27 10:13:11 fetching corpus: 21149, signal 516008/653563 (executing program) 2022/08/27 10:13:11 fetching corpus: 21199, signal 516293/653563 (executing program) 2022/08/27 10:13:11 fetching corpus: 21249, signal 516710/653563 (executing program) 2022/08/27 10:13:12 fetching corpus: 21299, signal 517070/653563 (executing program) 2022/08/27 10:13:12 fetching corpus: 21349, signal 517437/653563 (executing program) 2022/08/27 10:13:12 fetching corpus: 21399, signal 517880/653563 (executing program) 2022/08/27 10:13:12 fetching corpus: 21449, signal 518214/653563 (executing program) 2022/08/27 10:13:12 fetching corpus: 21499, signal 518638/653563 (executing program) 2022/08/27 10:13:12 fetching corpus: 21549, signal 519051/653563 (executing program) 2022/08/27 10:13:12 fetching corpus: 21599, signal 519386/653563 (executing program) 2022/08/27 10:13:13 fetching corpus: 21649, signal 519679/653563 (executing program) 2022/08/27 10:13:13 fetching corpus: 21699, signal 520032/653563 (executing program) 2022/08/27 10:13:13 fetching corpus: 21749, signal 520458/653563 (executing program) 2022/08/27 10:13:13 fetching corpus: 21799, signal 520711/653563 (executing program) 2022/08/27 10:13:13 fetching corpus: 21849, signal 520981/653563 (executing program) 2022/08/27 10:13:13 fetching corpus: 21899, signal 521379/653563 (executing program) 2022/08/27 10:13:14 fetching corpus: 21949, signal 521673/653563 (executing program) 2022/08/27 10:13:14 fetching corpus: 21999, signal 522085/653563 (executing program) 2022/08/27 10:13:14 fetching corpus: 22049, signal 522549/653563 (executing program) 2022/08/27 10:13:14 fetching corpus: 22099, signal 523023/653563 (executing program) 2022/08/27 10:13:14 fetching corpus: 22149, signal 523298/653563 (executing program) 2022/08/27 10:13:14 fetching corpus: 22199, signal 523657/653563 (executing program) [ 133.695408][ T1350] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.701245][ T1350] ieee802154 phy1 wpan1: encryption failed: -22 2022/08/27 10:13:15 fetching corpus: 22249, signal 524111/653563 (executing program) 2022/08/27 10:13:15 fetching corpus: 22299, signal 524513/653563 (executing program) 2022/08/27 10:13:16 fetching corpus: 22349, signal 524992/653563 (executing program) 2022/08/27 10:13:16 fetching corpus: 22399, signal 525322/653563 (executing program) 2022/08/27 10:13:16 fetching corpus: 22449, signal 525626/653563 (executing program) 2022/08/27 10:13:16 fetching corpus: 22499, signal 525990/653563 (executing program) 2022/08/27 10:13:16 fetching corpus: 22549, signal 526260/653563 (executing program) 2022/08/27 10:13:17 fetching corpus: 22599, signal 526686/653566 (executing program) 2022/08/27 10:13:17 fetching corpus: 22649, signal 526967/653566 (executing program) 2022/08/27 10:13:17 fetching corpus: 22699, signal 527320/653566 (executing program) 2022/08/27 10:13:17 fetching corpus: 22749, signal 527571/653566 (executing program) 2022/08/27 10:13:17 fetching corpus: 22799, signal 527972/653567 (executing program) 2022/08/27 10:13:17 fetching corpus: 22849, signal 528265/653567 (executing program) 2022/08/27 10:13:18 fetching corpus: 22899, signal 528650/653567 (executing program) 2022/08/27 10:13:18 fetching corpus: 22949, signal 528893/653567 (executing program) 2022/08/27 10:13:18 fetching corpus: 22999, signal 529372/653567 (executing program) 2022/08/27 10:13:18 fetching corpus: 23049, signal 529581/653567 (executing program) 2022/08/27 10:13:18 fetching corpus: 23099, signal 529847/653567 (executing program) 2022/08/27 10:13:18 fetching corpus: 23149, signal 530289/653567 (executing program) 2022/08/27 10:13:18 fetching corpus: 23199, signal 530677/653567 (executing program) 2022/08/27 10:13:19 fetching corpus: 23249, signal 531024/653567 (executing program) 2022/08/27 10:13:19 fetching corpus: 23299, signal 531297/653569 (executing program) 2022/08/27 10:13:19 fetching corpus: 23349, signal 531774/653569 (executing program) 2022/08/27 10:13:19 fetching corpus: 23399, signal 532007/653569 (executing program) 2022/08/27 10:13:19 fetching corpus: 23449, signal 532470/653569 (executing program) 2022/08/27 10:13:20 fetching corpus: 23499, signal 532776/653569 (executing program) 2022/08/27 10:13:20 fetching corpus: 23549, signal 533110/653569 (executing program) 2022/08/27 10:13:20 fetching corpus: 23599, signal 533309/653569 (executing program) 2022/08/27 10:13:20 fetching corpus: 23649, signal 533668/653569 (executing program) 2022/08/27 10:13:20 fetching corpus: 23699, signal 534036/653569 (executing program) 2022/08/27 10:13:20 fetching corpus: 23749, signal 534401/653569 (executing program) 2022/08/27 10:13:21 fetching corpus: 23799, signal 534687/653570 (executing program) 2022/08/27 10:13:21 fetching corpus: 23849, signal 535096/653570 (executing program) 2022/08/27 10:13:21 fetching corpus: 23899, signal 535633/653570 (executing program) 2022/08/27 10:13:21 fetching corpus: 23949, signal 535889/653570 (executing program) 2022/08/27 10:13:21 fetching corpus: 23999, signal 536225/653570 (executing program) 2022/08/27 10:13:21 fetching corpus: 24049, signal 536577/653570 (executing program) 2022/08/27 10:13:22 fetching corpus: 24099, signal 536985/653570 (executing program) 2022/08/27 10:13:22 fetching corpus: 24149, signal 537251/653570 (executing program) 2022/08/27 10:13:22 fetching corpus: 24199, signal 537540/653570 (executing program) 2022/08/27 10:13:22 fetching corpus: 24249, signal 538041/653583 (executing program) 2022/08/27 10:13:22 fetching corpus: 24299, signal 538418/653583 (executing program) 2022/08/27 10:13:22 fetching corpus: 24349, signal 538701/653583 (executing program) 2022/08/27 10:13:22 fetching corpus: 24399, signal 539043/653584 (executing program) 2022/08/27 10:13:23 fetching corpus: 24449, signal 539457/653586 (executing program) 2022/08/27 10:13:23 fetching corpus: 24499, signal 539827/653586 (executing program) 2022/08/27 10:13:23 fetching corpus: 24549, signal 540064/653586 (executing program) 2022/08/27 10:13:23 fetching corpus: 24599, signal 540395/653586 (executing program) 2022/08/27 10:13:23 fetching corpus: 24649, signal 540710/653586 (executing program) 2022/08/27 10:13:24 fetching corpus: 24699, signal 540991/653586 (executing program) 2022/08/27 10:13:24 fetching corpus: 24749, signal 541182/653586 (executing program) 2022/08/27 10:13:24 fetching corpus: 24799, signal 541607/653586 (executing program) 2022/08/27 10:13:24 fetching corpus: 24849, signal 541904/653586 (executing program) 2022/08/27 10:13:24 fetching corpus: 24899, signal 542269/653586 (executing program) 2022/08/27 10:13:25 fetching corpus: 24949, signal 542582/653586 (executing program) 2022/08/27 10:13:25 fetching corpus: 24999, signal 542978/653586 (executing program) 2022/08/27 10:13:25 fetching corpus: 25049, signal 543362/653586 (executing program) 2022/08/27 10:13:25 fetching corpus: 25099, signal 543599/653586 (executing program) 2022/08/27 10:13:25 fetching corpus: 25149, signal 544029/653588 (executing program) 2022/08/27 10:13:26 fetching corpus: 25199, signal 544367/653588 (executing program) 2022/08/27 10:13:26 fetching corpus: 25249, signal 544579/653588 (executing program) 2022/08/27 10:13:26 fetching corpus: 25299, signal 544872/653588 (executing program) 2022/08/27 10:13:26 fetching corpus: 25349, signal 545139/653593 (executing program) 2022/08/27 10:13:26 fetching corpus: 25399, signal 545563/653593 (executing program) 2022/08/27 10:13:26 fetching corpus: 25449, signal 545830/653593 (executing program) 2022/08/27 10:13:27 fetching corpus: 25499, signal 546081/653594 (executing program) 2022/08/27 10:13:27 fetching corpus: 25549, signal 546461/653594 (executing program) 2022/08/27 10:13:27 fetching corpus: 25599, signal 546796/653594 (executing program) 2022/08/27 10:13:27 fetching corpus: 25649, signal 547094/653594 (executing program) 2022/08/27 10:13:27 fetching corpus: 25699, signal 547443/653594 (executing program) 2022/08/27 10:13:27 fetching corpus: 25749, signal 547932/653594 (executing program) 2022/08/27 10:13:27 fetching corpus: 25799, signal 548161/653594 (executing program) 2022/08/27 10:13:28 fetching corpus: 25849, signal 548375/653594 (executing program) 2022/08/27 10:13:28 fetching corpus: 25899, signal 548561/653594 (executing program) 2022/08/27 10:13:28 fetching corpus: 25949, signal 548769/653594 (executing program) 2022/08/27 10:13:28 fetching corpus: 25999, signal 549036/653595 (executing program) 2022/08/27 10:13:28 fetching corpus: 26049, signal 549309/653595 (executing program) 2022/08/27 10:13:28 fetching corpus: 26099, signal 549697/653595 (executing program) 2022/08/27 10:13:29 fetching corpus: 26149, signal 550037/653599 (executing program) 2022/08/27 10:13:29 fetching corpus: 26199, signal 550323/653599 (executing program) 2022/08/27 10:13:29 fetching corpus: 26249, signal 550733/653599 (executing program) 2022/08/27 10:13:29 fetching corpus: 26299, signal 551010/653599 (executing program) 2022/08/27 10:13:29 fetching corpus: 26349, signal 551251/653599 (executing program) 2022/08/27 10:13:29 fetching corpus: 26399, signal 551596/653600 (executing program) 2022/08/27 10:13:30 fetching corpus: 26449, signal 551947/653602 (executing program) 2022/08/27 10:13:30 fetching corpus: 26499, signal 552188/653605 (executing program) 2022/08/27 10:13:30 fetching corpus: 26549, signal 552464/653605 (executing program) 2022/08/27 10:13:30 fetching corpus: 26599, signal 552755/653606 (executing program) 2022/08/27 10:13:31 fetching corpus: 26649, signal 553028/653606 (executing program) 2022/08/27 10:13:31 fetching corpus: 26699, signal 553277/653606 (executing program) 2022/08/27 10:13:31 fetching corpus: 26749, signal 553580/653606 (executing program) 2022/08/27 10:13:31 fetching corpus: 26799, signal 554022/653606 (executing program) 2022/08/27 10:13:31 fetching corpus: 26849, signal 554465/653606 (executing program) 2022/08/27 10:13:31 fetching corpus: 26899, signal 554820/653606 (executing program) 2022/08/27 10:13:32 fetching corpus: 26949, signal 555097/653606 (executing program) 2022/08/27 10:13:32 fetching corpus: 26999, signal 555366/653606 (executing program) 2022/08/27 10:13:32 fetching corpus: 27049, signal 555585/653606 (executing program) 2022/08/27 10:13:32 fetching corpus: 27099, signal 555828/653606 (executing program) 2022/08/27 10:13:32 fetching corpus: 27149, signal 556207/653606 (executing program) 2022/08/27 10:13:32 fetching corpus: 27199, signal 556536/653606 (executing program) 2022/08/27 10:13:33 fetching corpus: 27249, signal 556808/653606 (executing program) 2022/08/27 10:13:33 fetching corpus: 27299, signal 557019/653606 (executing program) 2022/08/27 10:13:33 fetching corpus: 27349, signal 557318/653606 (executing program) 2022/08/27 10:13:33 fetching corpus: 27399, signal 557694/653607 (executing program) 2022/08/27 10:13:33 fetching corpus: 27449, signal 557983/653607 (executing program) 2022/08/27 10:13:33 fetching corpus: 27499, signal 558266/653607 (executing program) 2022/08/27 10:13:34 fetching corpus: 27549, signal 558579/653607 (executing program) 2022/08/27 10:13:34 fetching corpus: 27599, signal 558943/653607 (executing program) 2022/08/27 10:13:34 fetching corpus: 27649, signal 559440/653607 (executing program) 2022/08/27 10:13:34 fetching corpus: 27699, signal 559888/653607 (executing program) 2022/08/27 10:13:35 fetching corpus: 27749, signal 560143/653607 (executing program) 2022/08/27 10:13:35 fetching corpus: 27799, signal 560378/653607 (executing program) 2022/08/27 10:13:35 fetching corpus: 27849, signal 560740/653607 (executing program) 2022/08/27 10:13:35 fetching corpus: 27899, signal 561012/653607 (executing program) 2022/08/27 10:13:35 fetching corpus: 27949, signal 561426/653607 (executing program) 2022/08/27 10:13:36 fetching corpus: 27999, signal 561697/653607 (executing program) 2022/08/27 10:13:36 fetching corpus: 28049, signal 562077/653610 (executing program) 2022/08/27 10:13:36 fetching corpus: 28099, signal 562365/653610 (executing program) 2022/08/27 10:13:37 fetching corpus: 28149, signal 562767/653610 (executing program) 2022/08/27 10:13:37 fetching corpus: 28199, signal 563023/653610 (executing program) 2022/08/27 10:13:37 fetching corpus: 28249, signal 563263/653610 (executing program) 2022/08/27 10:13:37 fetching corpus: 28299, signal 563610/653610 (executing program) 2022/08/27 10:13:37 fetching corpus: 28349, signal 563924/653611 (executing program) 2022/08/27 10:13:38 fetching corpus: 28399, signal 564318/653611 (executing program) 2022/08/27 10:13:38 fetching corpus: 28449, signal 564552/653611 (executing program) 2022/08/27 10:13:38 fetching corpus: 28499, signal 564784/653611 (executing program) 2022/08/27 10:13:38 fetching corpus: 28549, signal 565050/653615 (executing program) 2022/08/27 10:13:38 fetching corpus: 28599, signal 565240/653615 (executing program) 2022/08/27 10:13:39 fetching corpus: 28649, signal 565539/653615 (executing program) 2022/08/27 10:13:39 fetching corpus: 28699, signal 565868/653615 (executing program) 2022/08/27 10:13:39 fetching corpus: 28749, signal 566166/653615 (executing program) 2022/08/27 10:13:39 fetching corpus: 28799, signal 566374/653615 (executing program) 2022/08/27 10:13:39 fetching corpus: 28849, signal 566643/653615 (executing program) 2022/08/27 10:13:39 fetching corpus: 28899, signal 566944/653615 (executing program) 2022/08/27 10:13:40 fetching corpus: 28949, signal 567196/653615 (executing program) 2022/08/27 10:13:40 fetching corpus: 28999, signal 567458/653615 (executing program) 2022/08/27 10:13:40 fetching corpus: 29049, signal 567683/653615 (executing program) 2022/08/27 10:13:40 fetching corpus: 29099, signal 567926/653615 (executing program) 2022/08/27 10:13:40 fetching corpus: 29149, signal 568159/653615 (executing program) 2022/08/27 10:13:40 fetching corpus: 29199, signal 568341/653615 (executing program) 2022/08/27 10:13:40 fetching corpus: 29249, signal 568685/653615 (executing program) 2022/08/27 10:13:41 fetching corpus: 29299, signal 568910/653615 (executing program) 2022/08/27 10:13:41 fetching corpus: 29349, signal 569235/653615 (executing program) 2022/08/27 10:13:41 fetching corpus: 29399, signal 569545/653615 (executing program) 2022/08/27 10:13:42 fetching corpus: 29449, signal 569779/653615 (executing program) 2022/08/27 10:13:42 fetching corpus: 29499, signal 569999/653615 (executing program) 2022/08/27 10:13:42 fetching corpus: 29549, signal 570272/653615 (executing program) 2022/08/27 10:13:42 fetching corpus: 29599, signal 570585/653615 (executing program) 2022/08/27 10:13:42 fetching corpus: 29649, signal 570902/653615 (executing program) 2022/08/27 10:13:42 fetching corpus: 29699, signal 571175/653615 (executing program) 2022/08/27 10:13:43 fetching corpus: 29749, signal 571450/653615 (executing program) 2022/08/27 10:13:43 fetching corpus: 29799, signal 571710/653615 (executing program) 2022/08/27 10:13:43 fetching corpus: 29849, signal 571943/653615 (executing program) 2022/08/27 10:13:43 fetching corpus: 29899, signal 572196/653615 (executing program) 2022/08/27 10:13:43 fetching corpus: 29949, signal 572468/653615 (executing program) 2022/08/27 10:13:43 fetching corpus: 29999, signal 572791/653615 (executing program) 2022/08/27 10:13:44 fetching corpus: 30049, signal 573191/653615 (executing program) 2022/08/27 10:13:44 fetching corpus: 30099, signal 573505/653617 (executing program) 2022/08/27 10:13:44 fetching corpus: 30149, signal 573773/653617 (executing program) 2022/08/27 10:13:44 fetching corpus: 30199, signal 574110/653617 (executing program) 2022/08/27 10:13:44 fetching corpus: 30249, signal 574529/653617 (executing program) 2022/08/27 10:13:44 fetching corpus: 30299, signal 574814/653617 (executing program) 2022/08/27 10:13:45 fetching corpus: 30349, signal 575121/653617 (executing program) 2022/08/27 10:13:45 fetching corpus: 30399, signal 575393/653617 (executing program) 2022/08/27 10:13:45 fetching corpus: 30449, signal 575635/653617 (executing program) 2022/08/27 10:13:45 fetching corpus: 30499, signal 575879/653617 (executing program) 2022/08/27 10:13:45 fetching corpus: 30549, signal 576164/653617 (executing program) 2022/08/27 10:13:45 fetching corpus: 30599, signal 576459/653617 (executing program) 2022/08/27 10:13:46 fetching corpus: 30649, signal 576770/653617 (executing program) 2022/08/27 10:13:46 fetching corpus: 30699, signal 577112/653617 (executing program) 2022/08/27 10:13:46 fetching corpus: 30749, signal 577282/653617 (executing program) 2022/08/27 10:13:46 fetching corpus: 30799, signal 577520/653617 (executing program) 2022/08/27 10:13:46 fetching corpus: 30849, signal 577862/653618 (executing program) 2022/08/27 10:13:47 fetching corpus: 30899, signal 578221/653618 (executing program) 2022/08/27 10:13:47 fetching corpus: 30949, signal 578508/653618 (executing program) 2022/08/27 10:13:47 fetching corpus: 30999, signal 578797/653618 (executing program) 2022/08/27 10:13:48 fetching corpus: 31049, signal 579136/653618 (executing program) 2022/08/27 10:13:48 fetching corpus: 31099, signal 579389/653618 (executing program) 2022/08/27 10:13:48 fetching corpus: 31149, signal 579677/653618 (executing program) 2022/08/27 10:13:48 fetching corpus: 31199, signal 580007/653618 (executing program) 2022/08/27 10:13:48 fetching corpus: 31249, signal 580236/653618 (executing program) 2022/08/27 10:13:48 fetching corpus: 31299, signal 580501/653618 (executing program) 2022/08/27 10:13:48 fetching corpus: 31349, signal 580787/653618 (executing program) 2022/08/27 10:13:49 fetching corpus: 31399, signal 581100/653618 (executing program) 2022/08/27 10:13:49 fetching corpus: 31449, signal 581353/653618 (executing program) 2022/08/27 10:13:49 fetching corpus: 31499, signal 581603/653619 (executing program) 2022/08/27 10:13:49 fetching corpus: 31549, signal 581817/653619 (executing program) 2022/08/27 10:13:49 fetching corpus: 31599, signal 582017/653619 (executing program) 2022/08/27 10:13:50 fetching corpus: 31649, signal 582232/653619 (executing program) 2022/08/27 10:13:50 fetching corpus: 31699, signal 582499/653619 (executing program) 2022/08/27 10:13:50 fetching corpus: 31749, signal 582749/653619 (executing program) 2022/08/27 10:13:50 fetching corpus: 31799, signal 582924/653619 (executing program) 2022/08/27 10:13:51 fetching corpus: 31849, signal 583162/653621 (executing program) 2022/08/27 10:13:51 fetching corpus: 31899, signal 583533/653621 (executing program) 2022/08/27 10:13:51 fetching corpus: 31949, signal 583778/653621 (executing program) 2022/08/27 10:13:51 fetching corpus: 31999, signal 584003/653621 (executing program) 2022/08/27 10:13:51 fetching corpus: 32049, signal 584227/653621 (executing program) 2022/08/27 10:13:52 fetching corpus: 32099, signal 584740/653633 (executing program) 2022/08/27 10:13:52 fetching corpus: 32149, signal 585176/653633 (executing program) 2022/08/27 10:13:52 fetching corpus: 32199, signal 585443/653633 (executing program) 2022/08/27 10:13:52 fetching corpus: 32249, signal 585724/653633 (executing program) 2022/08/27 10:13:52 fetching corpus: 32299, signal 585968/653633 (executing program) 2022/08/27 10:13:53 fetching corpus: 32349, signal 586229/653633 (executing program) 2022/08/27 10:13:53 fetching corpus: 32399, signal 586476/653633 (executing program) 2022/08/27 10:13:53 fetching corpus: 32449, signal 586708/653633 (executing program) 2022/08/27 10:13:53 fetching corpus: 32499, signal 587082/653633 (executing program) 2022/08/27 10:13:54 fetching corpus: 32549, signal 587270/653633 (executing program) 2022/08/27 10:13:54 fetching corpus: 32599, signal 587587/653633 (executing program) 2022/08/27 10:13:54 fetching corpus: 32649, signal 587823/653633 (executing program) 2022/08/27 10:13:54 fetching corpus: 32699, signal 588170/653633 (executing program) 2022/08/27 10:13:54 fetching corpus: 32749, signal 588413/653633 (executing program) 2022/08/27 10:13:54 fetching corpus: 32799, signal 588602/653634 (executing program) 2022/08/27 10:13:55 fetching corpus: 32849, signal 588928/653634 (executing program) 2022/08/27 10:13:55 fetching corpus: 32899, signal 589194/653634 (executing program) 2022/08/27 10:13:55 fetching corpus: 32949, signal 589487/653634 (executing program) 2022/08/27 10:13:55 fetching corpus: 32999, signal 589707/653634 (executing program) 2022/08/27 10:13:55 fetching corpus: 33049, signal 589944/653634 (executing program) 2022/08/27 10:13:55 fetching corpus: 33099, signal 590182/653634 (executing program) 2022/08/27 10:13:55 fetching corpus: 33149, signal 590387/653634 (executing program) 2022/08/27 10:13:56 fetching corpus: 33199, signal 590659/653634 (executing program) 2022/08/27 10:13:56 fetching corpus: 33249, signal 590930/653634 (executing program) 2022/08/27 10:13:56 fetching corpus: 33299, signal 591160/653634 (executing program) 2022/08/27 10:13:56 fetching corpus: 33349, signal 591461/653634 (executing program) 2022/08/27 10:13:56 fetching corpus: 33399, signal 591650/653634 (executing program) 2022/08/27 10:13:56 fetching corpus: 33449, signal 591954/653634 (executing program) 2022/08/27 10:13:57 fetching corpus: 33499, signal 592169/653634 (executing program) 2022/08/27 10:13:57 fetching corpus: 33549, signal 592510/653637 (executing program) 2022/08/27 10:13:57 fetching corpus: 33599, signal 592827/653637 (executing program) 2022/08/27 10:13:57 fetching corpus: 33649, signal 593135/653637 (executing program) 2022/08/27 10:13:57 fetching corpus: 33699, signal 593300/653637 (executing program) 2022/08/27 10:13:57 fetching corpus: 33749, signal 593703/653637 (executing program) 2022/08/27 10:13:58 fetching corpus: 33799, signal 594001/653638 (executing program) 2022/08/27 10:13:58 fetching corpus: 33849, signal 594376/653638 (executing program) 2022/08/27 10:13:58 fetching corpus: 33899, signal 594704/653638 (executing program) 2022/08/27 10:13:58 fetching corpus: 33949, signal 594882/653639 (executing program) 2022/08/27 10:13:58 fetching corpus: 33999, signal 595073/653639 (executing program) 2022/08/27 10:13:59 fetching corpus: 34049, signal 595369/653639 (executing program) 2022/08/27 10:13:59 fetching corpus: 34099, signal 596010/653639 (executing program) 2022/08/27 10:13:59 fetching corpus: 34149, signal 596259/653639 (executing program) 2022/08/27 10:13:59 fetching corpus: 34199, signal 596540/653639 (executing program) 2022/08/27 10:13:59 fetching corpus: 34249, signal 596801/653639 (executing program) 2022/08/27 10:14:00 fetching corpus: 34299, signal 597015/653639 (executing program) 2022/08/27 10:14:00 fetching corpus: 34349, signal 597242/653640 (executing program) 2022/08/27 10:14:00 fetching corpus: 34399, signal 597478/653640 (executing program) 2022/08/27 10:14:00 fetching corpus: 34449, signal 597726/653640 (executing program) 2022/08/27 10:14:01 fetching corpus: 34499, signal 598005/653640 (executing program) 2022/08/27 10:14:01 fetching corpus: 34549, signal 598208/653640 (executing program) 2022/08/27 10:14:01 fetching corpus: 34599, signal 598490/653640 (executing program) 2022/08/27 10:14:01 fetching corpus: 34649, signal 598805/653640 (executing program) 2022/08/27 10:14:01 fetching corpus: 34699, signal 599024/653640 (executing program) 2022/08/27 10:14:01 fetching corpus: 34749, signal 599341/653640 (executing program) 2022/08/27 10:14:02 fetching corpus: 34799, signal 599591/653640 (executing program) 2022/08/27 10:14:02 fetching corpus: 34849, signal 599893/653640 (executing program) 2022/08/27 10:14:02 fetching corpus: 34899, signal 600142/653640 (executing program) 2022/08/27 10:14:02 fetching corpus: 34949, signal 600450/653640 (executing program) 2022/08/27 10:14:02 fetching corpus: 34999, signal 600658/653640 (executing program) 2022/08/27 10:14:02 fetching corpus: 35049, signal 600948/653640 (executing program) 2022/08/27 10:14:03 fetching corpus: 35099, signal 601233/653640 (executing program) 2022/08/27 10:14:03 fetching corpus: 35149, signal 601429/653640 (executing program) 2022/08/27 10:14:03 fetching corpus: 35199, signal 601673/653640 (executing program) 2022/08/27 10:14:03 fetching corpus: 35249, signal 602097/653640 (executing program) 2022/08/27 10:14:03 fetching corpus: 35299, signal 602359/653640 (executing program) 2022/08/27 10:14:04 fetching corpus: 35349, signal 602730/653640 (executing program) 2022/08/27 10:14:04 fetching corpus: 35399, signal 602969/653640 (executing program) 2022/08/27 10:14:04 fetching corpus: 35449, signal 603259/653641 (executing program) 2022/08/27 10:14:04 fetching corpus: 35499, signal 603648/653641 (executing program) 2022/08/27 10:14:04 fetching corpus: 35549, signal 603905/653641 (executing program) 2022/08/27 10:14:05 fetching corpus: 35599, signal 604111/653641 (executing program) 2022/08/27 10:14:05 fetching corpus: 35649, signal 604458/653641 (executing program) 2022/08/27 10:14:05 fetching corpus: 35699, signal 604778/653641 (executing program) 2022/08/27 10:14:05 fetching corpus: 35749, signal 604998/653641 (executing program) 2022/08/27 10:14:05 fetching corpus: 35799, signal 605219/653641 (executing program) 2022/08/27 10:14:05 fetching corpus: 35849, signal 605460/653641 (executing program) 2022/08/27 10:14:05 fetching corpus: 35899, signal 605699/653641 (executing program) 2022/08/27 10:14:06 fetching corpus: 35949, signal 605889/653641 (executing program) 2022/08/27 10:14:06 fetching corpus: 35999, signal 606127/653641 (executing program) 2022/08/27 10:14:06 fetching corpus: 36049, signal 606361/653659 (executing program) 2022/08/27 10:14:06 fetching corpus: 36099, signal 606832/653659 (executing program) 2022/08/27 10:14:06 fetching corpus: 36149, signal 607032/653659 (executing program) 2022/08/27 10:14:06 fetching corpus: 36199, signal 607367/653659 (executing program) 2022/08/27 10:14:07 fetching corpus: 36249, signal 607646/653659 (executing program) 2022/08/27 10:14:07 fetching corpus: 36299, signal 608013/653659 (executing program) 2022/08/27 10:14:07 fetching corpus: 36349, signal 608276/653661 (executing program) 2022/08/27 10:14:07 fetching corpus: 36399, signal 608546/653661 (executing program) 2022/08/27 10:14:08 fetching corpus: 36449, signal 608743/653662 (executing program) 2022/08/27 10:14:08 fetching corpus: 36499, signal 608985/653662 (executing program) 2022/08/27 10:14:08 fetching corpus: 36549, signal 609284/653662 (executing program) 2022/08/27 10:14:08 fetching corpus: 36599, signal 609544/653662 (executing program) 2022/08/27 10:14:08 fetching corpus: 36649, signal 609736/653662 (executing program) 2022/08/27 10:14:08 fetching corpus: 36699, signal 609945/653662 (executing program) 2022/08/27 10:14:09 fetching corpus: 36749, signal 610206/653662 (executing program) 2022/08/27 10:14:09 fetching corpus: 36799, signal 610414/653662 (executing program) 2022/08/27 10:14:09 fetching corpus: 36849, signal 610619/653662 (executing program) 2022/08/27 10:14:09 fetching corpus: 36899, signal 610808/653662 (executing program) 2022/08/27 10:14:09 fetching corpus: 36949, signal 611017/653662 (executing program) 2022/08/27 10:14:10 fetching corpus: 36999, signal 611308/653662 (executing program) 2022/08/27 10:14:10 fetching corpus: 37049, signal 611534/653662 (executing program) 2022/08/27 10:14:10 fetching corpus: 37099, signal 611817/653662 (executing program) 2022/08/27 10:14:10 fetching corpus: 37149, signal 612058/653662 (executing program) 2022/08/27 10:14:10 fetching corpus: 37199, signal 612477/653664 (executing program) 2022/08/27 10:14:10 fetching corpus: 37249, signal 612673/653664 (executing program) 2022/08/27 10:14:11 fetching corpus: 37261, signal 612759/653707 (executing program) 2022/08/27 10:14:11 fetching corpus: 37261, signal 612759/653707 (executing program) 2022/08/27 10:14:14 starting 4 fuzzer processes 10:14:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000001380)='fd\x00') pidfd_send_signal(r0, 0x0, 0x0, 0x0) 10:14:14 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000), 0x4) 10:14:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/current\x00') read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 10:14:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x2, 0x10}, 0x48) [ 192.314531][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 192.314638][ T39] audit: type=1400 audit(1661595254.079:86): avc: denied { execmem } for pid=3697 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 192.542516][ T39] audit: type=1400 audit(1661595254.309:88): avc: denied { mounton } for pid=3702 comm="syz-executor.1" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 192.561747][ T39] audit: type=1400 audit(1661595254.309:87): avc: denied { mounton } for pid=3703 comm="syz-executor.2" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 192.577919][ T39] audit: type=1400 audit(1661595254.309:89): avc: denied { mount } for pid=3703 comm="syz-executor.2" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 192.593264][ T39] audit: type=1400 audit(1661595254.309:90): avc: denied { create } for pid=3703 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.606731][ T39] audit: type=1400 audit(1661595254.309:91): avc: denied { create } for pid=3702 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.619386][ T39] audit: type=1400 audit(1661595254.309:92): avc: denied { read write } for pid=3703 comm="syz-executor.2" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 192.633965][ T39] audit: type=1400 audit(1661595254.309:93): avc: denied { read write } for pid=3702 comm="syz-executor.1" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 192.650186][ T39] audit: type=1400 audit(1661595254.309:94): avc: denied { open } for pid=3703 comm="syz-executor.2" path="/dev/vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 193.629742][ T39] audit: type=1400 audit(1661595255.389:95): avc: denied { ioctl } for pid=3702 comm="syz-executor.1" path="socket:[1983]" dev="sockfs" ino=1983 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.660454][ T3716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.662865][ T3718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.663753][ T3717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.665864][ T3720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.666440][ T3720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.667094][ T3720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.667472][ T3720] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 193.668844][ T3716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.669167][ T3716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.669850][ T3716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.670378][ T3716] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 193.670711][ T3716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.673622][ T3719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.674928][ T3716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.675577][ T3716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.677178][ T3716] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.677366][ T3720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.683469][ T3719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.687688][ T3716] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 193.692442][ T3719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.697735][ T3716] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.712344][ T3720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.767365][ T3720] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 193.772496][ T3720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.168984][ T3703] chnl_net:caif_netlink_parms(): no params data found [ 194.194307][ T3704] chnl_net:caif_netlink_parms(): no params data found [ 194.230534][ T3705] chnl_net:caif_netlink_parms(): no params data found [ 194.265502][ T3702] chnl_net:caif_netlink_parms(): no params data found [ 194.595121][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.600251][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.607353][ T3705] device bridge_slave_0 entered promiscuous mode [ 194.635882][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.640751][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.648833][ T3703] device bridge_slave_0 entered promiscuous mode [ 194.655758][ T3704] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.660432][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.666569][ T3704] device bridge_slave_0 entered promiscuous mode [ 194.696019][ T3705] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.702709][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.709398][ T3705] device bridge_slave_1 entered promiscuous mode [ 194.716035][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.721024][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.728319][ T3703] device bridge_slave_1 entered promiscuous mode [ 194.735217][ T3704] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.739697][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.746631][ T3704] device bridge_slave_1 entered promiscuous mode [ 194.777056][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.783386][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.792831][ T3702] device bridge_slave_0 entered promiscuous mode [ 194.860294][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.865275][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.870878][ T3702] device bridge_slave_1 entered promiscuous mode [ 194.933782][ T3704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.942962][ T3704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.975833][ T3705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.987809][ T3703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.055030][ T3705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.066701][ T3703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.094665][ T3702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.109010][ T3702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.145240][ T1350] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.149572][ T1350] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.178277][ T3704] team0: Port device team_slave_0 added [ 195.184304][ T3704] team0: Port device team_slave_1 added [ 195.206641][ T3705] team0: Port device team_slave_0 added [ 195.273407][ T3705] team0: Port device team_slave_1 added [ 195.290033][ T3703] team0: Port device team_slave_0 added [ 195.297420][ T3703] team0: Port device team_slave_1 added [ 195.319747][ T3702] team0: Port device team_slave_0 added [ 195.355824][ T3704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.360894][ T3704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.381014][ T3704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.392844][ T3702] team0: Port device team_slave_1 added [ 195.439169][ T3704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.445142][ T3704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.463738][ T3704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.502984][ T3705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.508731][ T3705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.529779][ T3705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.538225][ T3703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.543961][ T3703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.560828][ T3703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.569831][ T3703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.574202][ T3703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.592130][ T3703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.600953][ T3702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.606297][ T3702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.623030][ T3702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.630950][ T3705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.636459][ T3705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.656427][ T3705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.687143][ T3702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.692841][ T3702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.713629][ T3702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.773611][ T971] Bluetooth: hci3: command 0x0409 tx timeout [ 195.782037][ T24] Bluetooth: hci0: command 0x0409 tx timeout [ 195.782113][ T3036] Bluetooth: hci2: command 0x0409 tx timeout [ 195.825189][ T3704] device hsr_slave_0 entered promiscuous mode [ 195.830714][ T3704] device hsr_slave_1 entered promiscuous mode [ 195.852870][ T3703] device hsr_slave_0 entered promiscuous mode [ 195.858418][ T3703] device hsr_slave_1 entered promiscuous mode [ 195.863355][ T971] Bluetooth: hci1: command 0x0409 tx timeout [ 195.868764][ T3703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.874800][ T3703] Cannot create hsr debugfs directory [ 195.881483][ T3705] device hsr_slave_0 entered promiscuous mode [ 195.886064][ T3705] device hsr_slave_1 entered promiscuous mode [ 195.890249][ T3705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.895136][ T3705] Cannot create hsr debugfs directory [ 195.919440][ T3702] device hsr_slave_0 entered promiscuous mode [ 195.924215][ T3702] device hsr_slave_1 entered promiscuous mode [ 195.928605][ T3702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.933486][ T3702] Cannot create hsr debugfs directory [ 196.364544][ T3705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.373267][ T3705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.381973][ T3705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.390297][ T3705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.453080][ T3702] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.469578][ T3702] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.481114][ T3702] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.503798][ T3702] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.568039][ T3704] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.577212][ T3704] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.603566][ T3704] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.611267][ T3704] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.667344][ T3705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.674469][ T3703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.691668][ T3703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.700225][ T3703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.707978][ T3703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.737228][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.744040][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.755676][ T3705] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.774953][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.780719][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.787006][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.791684][ T3740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.806175][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.811750][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.819408][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.825239][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.829935][ T3741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.845584][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.900492][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.926163][ T3702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.933351][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.939324][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.946393][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.953288][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.958960][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.970749][ T3703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.977889][ T3704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.984051][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.991236][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.008112][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.015362][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.033078][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.039012][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.045052][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.050394][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.056367][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.066140][ T3704] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.077995][ T3703] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.084684][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.091833][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.103151][ T3702] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.110047][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.118758][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.124730][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.129721][ T3741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.135785][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.153945][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.161566][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.169148][ T3330] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.174099][ T3330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.179204][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.185540][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.191240][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.196213][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.201652][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.209682][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.216603][ T3330] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.221624][ T3330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.229773][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.235539][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.266561][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.275085][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.284076][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.292902][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.301045][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.309322][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.317552][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.325683][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.333689][ T3740] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.339795][ T3740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.346557][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.354222][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.360512][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.367155][ T3740] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.372180][ T3740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.378785][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.397133][ T3704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.407123][ T3704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.425958][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.432525][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.438871][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.445702][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.451200][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.458214][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.464422][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.469341][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.476158][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.482442][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.487482][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.521795][ T3703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.529588][ T3703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.539267][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.546885][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.553340][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.559064][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.565113][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.569962][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.574623][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.580130][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.586493][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.593279][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.599535][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.607310][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.614248][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.620402][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.628139][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.634904][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.645569][ T3705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.664502][ T3704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.673478][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.679248][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.689301][ T3702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.689794][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 197.689806][ T39] audit: type=1400 audit(1661595259.449:99): avc: denied { module_request } for pid=3705 comm="syz-executor.3" kmod="netdev-xfrm0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 197.699241][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.746678][ T3703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.752981][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.768475][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.776341][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.784123][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.805638][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.811612][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.822966][ T39] audit: type=1400 audit(1661595259.589:100): avc: denied { sys_module } for pid=3704 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 197.825956][ T3702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.852455][ T29] Bluetooth: hci2: command 0x041b tx timeout [ 197.857460][ T29] Bluetooth: hci0: command 0x041b tx timeout [ 197.870533][ T29] Bluetooth: hci3: command 0x041b tx timeout [ 197.932429][ T29] Bluetooth: hci1: command 0x041b tx timeout [ 197.953522][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.959643][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.988007][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.994947][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.004761][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.010204][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.020717][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.026242][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.033496][ T3704] device veth0_vlan entered promiscuous mode [ 198.050581][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.057392][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.073544][ T3702] device veth0_vlan entered promiscuous mode [ 198.085603][ T3705] device veth0_vlan entered promiscuous mode [ 198.096565][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.104622][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.112461][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.119716][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.127755][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.134908][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.141155][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.147439][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.165884][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.174300][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.184644][ T3705] device veth1_vlan entered promiscuous mode [ 198.199263][ T3704] device veth1_vlan entered promiscuous mode [ 198.207232][ T3702] device veth1_vlan entered promiscuous mode [ 198.225495][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.230993][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.236867][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.243620][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.250089][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.259396][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.267208][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.276902][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.299670][ T3703] device veth0_vlan entered promiscuous mode [ 198.320235][ T3703] device veth1_vlan entered promiscuous mode [ 198.342537][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.350761][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.365671][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.381132][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 198.388947][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.400241][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.429212][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.438017][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.445428][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.462459][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.470572][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.479921][ T3330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.501382][ T3704] device veth0_macvtap entered promiscuous mode [ 198.520234][ T3703] device veth0_macvtap entered promiscuous mode [ 198.529520][ T3705] device veth0_macvtap entered promiscuous mode [ 198.539709][ T3702] device veth0_macvtap entered promiscuous mode [ 198.550234][ T3703] device veth1_macvtap entered promiscuous mode [ 198.561393][ T3704] device veth1_macvtap entered promiscuous mode [ 198.568817][ T3705] device veth1_macvtap entered promiscuous mode [ 198.583999][ T3702] device veth1_macvtap entered promiscuous mode [ 198.618956][ T3705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.629372][ T3705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.639287][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.647744][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.656443][ T3704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.664067][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.671089][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.678261][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.684305][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.690041][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.696538][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.702525][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.707926][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.713994][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.723768][ T3705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.730679][ T3705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.737125][ T3705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.745562][ T3705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.764849][ T3702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.775262][ T3702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.784830][ T3702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.794085][ T3702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.803220][ T3702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.813189][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.825298][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.835592][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.843273][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.849579][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 198.857074][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.865464][ T3703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.872075][ T3704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.879610][ T3704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.892674][ T3704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.903681][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.913182][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.921654][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.929806][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.938577][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.946273][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.961761][ T3702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.970996][ T3702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.979368][ T3702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 198.986825][ T3702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.996190][ T3702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.032687][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.039333][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.050312][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.063533][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.071289][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.078353][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.086053][ T3703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.095104][ T3703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.114642][ T3703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.128649][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.138264][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.146394][ T3702] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.152276][ T3702] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.157918][ T3702] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.163601][ T3702] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.172964][ T3703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.179400][ T3703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.186085][ T3703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.193228][ T3703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.203790][ T3704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.205180][ T39] audit: type=1400 audit(1661595260.969:101): avc: denied { mounton } for pid=3705 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 199.209649][ T3704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.225579][ T39] audit: type=1400 audit(1661595260.979:102): avc: denied { mount } for pid=3705 comm="syz-executor.3" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 199.236813][ T3704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.257770][ T3704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.420615][ T39] audit: type=1400 audit(1661595261.179:103): avc: denied { read write } for pid=3705 comm="syz-executor.3" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.443100][ T39] audit: type=1400 audit(1661595261.179:104): avc: denied { open } for pid=3705 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.469922][ T39] audit: type=1400 audit(1661595261.179:105): avc: denied { ioctl } for pid=3705 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.600145][ T39] audit: type=1400 audit(1661595261.359:106): avc: denied { create } for pid=3770 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.624091][ T39] audit: type=1400 audit(1661595261.369:107): avc: denied { bpf } for pid=3774 comm="syz-executor.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.640931][ T39] audit: type=1400 audit(1661595261.369:108): avc: denied { map_create } for pid=3774 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 10:14:21 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xffffff00}]}]}}, &(0x7f0000000080)=""/240, 0x2e, 0xf0, 0x10000001}, 0x20) 10:14:21 executing program 0: mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 10:14:21 executing program 2: syz_clone(0x430e2080, 0x0, 0xffffffffffffff68, 0x0, 0x0, 0x0) 10:14:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x1, &(0x7f0000000300)=@raw=[@func], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xffc, &(0x7f0000002980)=""/4092, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:14:21 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x8, 0x2, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)="5ad0ce78abffffffffffffffff4fc04646194aa504c202a23c", &(0x7f0000000200), 0x957f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=""/106, &(0x7f0000000400), &(0x7f0000000140), 0x7, r0}, 0x38) 10:14:21 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x0, 0x7, &(0x7f0000000680)) 10:14:21 executing program 0: mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 10:14:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080), 0x90) 10:14:21 executing program 0: mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) [ 199.932343][ T3739] Bluetooth: hci3: command 0x040f tx timeout [ 199.939529][ T3739] Bluetooth: hci0: command 0x040f tx timeout [ 199.948064][ T3739] Bluetooth: hci2: command 0x040f tx timeout [ 200.022364][ T3739] Bluetooth: hci1: command 0x040f tx timeout 10:14:21 executing program 0: mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) 10:14:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000380)={0x0, @in, 0x0, 0x0, 0x111}, 0x98) 10:14:21 executing program 2: syz_clone(0x430e2080, 0x0, 0xffffffffffffff68, 0x0, 0x0, 0x0) 10:14:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000100), &(0x7f0000000140)=0x8) 10:14:22 executing program 2: syz_clone(0x430e2080, 0x0, 0xffffffffffffff68, 0x0, 0x0, 0x0) 10:14:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000000080)={r3}, &(0x7f00000000c0)=0x8) 10:14:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x8, 0x2, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)="5ad0ce78abffffffffffffffff4fc04646194aa504c202a23c", &(0x7f0000000200), 0x957f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=""/106, &(0x7f0000000400), &(0x7f0000000140), 0x7, r0}, 0x38) 10:14:22 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x8, 0x2, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)="5ad0ce78abffffffffffffffff4fc04646194aa504c202a23c", &(0x7f0000000200), 0x957f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=""/106, &(0x7f0000000400), &(0x7f0000000140), 0x7, r0}, 0x38) 10:14:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000026c0)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x102, &(0x7f0000000080), &(0x7f0000000140)=0x8) 10:14:22 executing program 0: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) 10:14:22 executing program 0: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 10:14:22 executing program 2: syz_clone(0x430e2080, 0x0, 0xffffffffffffff68, 0x0, 0x0, 0x0) 10:14:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000080)=@in={0x10}, 0x10, 0x0}, 0x0) 10:14:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x8) 10:14:23 executing program 0: msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 10:14:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x8, 0x2, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)="5ad0ce78abffffffffffffffff4fc04646194aa504c202a23c", &(0x7f0000000200), 0x957f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=""/106, &(0x7f0000000400), &(0x7f0000000140), 0x7, r0}, 0x38) 10:14:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f0000000040)=0xffffffff, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)='_', 0x1}], 0x1}, 0x0) 10:14:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) recvfrom(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 10:14:23 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x8, 0x2, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)="5ad0ce78abffffffffffffffff4fc04646194aa504c202a23c", &(0x7f0000000200), 0x957f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=""/106, &(0x7f0000000400), &(0x7f0000000140), 0x7, r0}, 0x38) 10:14:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}, 0x14) 10:14:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f0000000140)={r3}, 0x8) 10:14:23 executing program 0: mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 10:14:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080)={0x0, 0x3610}, 0x10) sendto$inet(r1, &(0x7f00000000c0)='&', 0x1, 0x0, 0x0, 0x0) 10:14:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000000), 0x88) [ 202.021995][ T40] Bluetooth: hci2: command 0x0419 tx timeout [ 202.032503][ T40] Bluetooth: hci0: command 0x0419 tx timeout [ 202.042618][ T40] Bluetooth: hci3: command 0x0419 tx timeout [ 202.092020][ T40] Bluetooth: hci1: command 0x0419 tx timeout 10:14:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000000100)=0x8) 10:14:24 executing program 2: fchownat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x400) 10:14:24 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x8, 0x2, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)="5ad0ce78abffffffffffffffff4fc04646194aa504c202a23c", &(0x7f0000000200), 0x957f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=""/106, &(0x7f0000000400), &(0x7f0000000140), 0x7, r0}, 0x38) 10:14:24 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x8, 0x2, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)="5ad0ce78abffffffffffffffff4fc04646194aa504c202a23c", &(0x7f0000000200), 0x957f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=""/106, &(0x7f0000000400), &(0x7f0000000140), 0x7, r0}, 0x38) 10:14:24 executing program 0: semget(0x3, 0x0, 0x2e4) 10:14:24 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) listen(r0, 0x3) 10:14:24 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1c, 0x1c, 0x2}, 0x7f) 10:14:24 executing program 0: connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x2}, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000002c0), &(0x7f0000001700)=0x4) 10:14:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@init={0x14}, @prinfo={0x14}], 0x28}, 0x0) 10:14:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000300), 0x8) 10:14:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10) 10:14:24 executing program 0: open$dir(0x0, 0x40000, 0x0) 10:14:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000026c0)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000000), &(0x7f0000000100)=0xb0) 10:14:24 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) read(r0, &(0x7f0000000080)=""/29, 0x1d) 10:14:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) 10:14:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000022c0)='./file0\x00', 0x4641, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) 10:14:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f00000003c0)={0x10, 0x2}, 0x10) [ 203.209149][ T39] kauditd_printk_skb: 13 callbacks suppressed 10:14:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000022c0)='./file0\x00', 0x4641, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) [ 203.209167][ T39] audit: type=1400 audit(1661595264.969:122): avc: denied { bind } for pid=3893 comm="syz-executor.1" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 10:14:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd350}, 0x14) 10:14:25 executing program 1: mount(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 10:14:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000022c0)='./file0\x00', 0x4641, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000022c0)='./file0\x00', 0x4641, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) (async) 10:14:25 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 10:14:25 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 10:14:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x10) 10:14:25 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@cred], 0x68}, 0x0) 10:14:25 executing program 3: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffff9c, 0x0, 0x51, 0x0, 0x0) 10:14:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r3, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x108, &(0x7f0000000040)={r2, 0x0, 0xf}, &(0x7f0000000080)=0x18) 10:14:25 executing program 1: r0 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001140)={&(0x7f0000000ac0)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@init={0x14}, @dstaddrv6={0x1c, 0x84, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}}, @sndrcv={0x2c}, @sndrcv={0x2c}, @dstaddrv6={0x1c, 0x84, 0xa, @rand_addr=' \x01\x00'}], 0xa4}, 0x0) 10:14:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0xb2707ab1068a1192, 0xc1) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"50ef7c2ff362935080fed2bdd95ca7e3", 0x0, 0x0, {0x20, 0x9}, {0x1, 0x4}, 0x0, [0x0, 0xc80, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6369, 0x9, 0xffffffffffff549c]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) preadv(r0, 0x0, 0x0, 0x4, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x80100, 0x86) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10:14:25 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"271612d4ef904d51162cd8b87df0b66a", 0x0, 0x0, {0xf35800000000, 0xffffffff}, {0x8}, 0x8, [0x183700000000, 0xeb6b, 0x7ff, 0x4b3f, 0x5, 0x6, 0xffffffffffffffff, 0xc5, 0x0, 0x9, 0xffffffffffffffdb, 0x3, 0x40, 0x8, 0x4, 0x47ba]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"0a700cdc280a0ef1d9e3603e00093913", 0x0, r0, {0x100000001, 0x3}, {0x1f, 0x8}, 0x5, [0x8, 0x94, 0x7fff, 0x6, 0x10001, 0x4, 0x4c, 0x5, 0x5, 0x407e31cb, 0x912c, 0xf3b2, 0x7, 0x1, 0x401, 0x826f]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 10:14:25 executing program 2: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="8c", 0x1) r3 = dup(r2) r4 = open(&(0x7f0000000080)='./file1\x00', 0x1c982, 0xb0) ftruncate(r4, 0x200004) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0xfffffffffffffffc, 0x0) read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d1) setsockopt(r3, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) 10:14:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x20044098) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnetconf={0x14, 0x48, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipmr_newroute={0x24, 0x18, 0x400, 0x70bd28, 0x25dfdbfd, {0x80, 0x20, 0x14, 0x3, 0xfd, 0x2, 0x36, 0x7}, [@RTA_DPORT={0x6, 0x1d, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8d4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) [ 203.602788][ T39] audit: type=1400 audit(1661595265.369:123): avc: denied { create } for pid=3923 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 203.604252][ T3925] "syz-executor.2" (3925) uses obsolete ecb(arc4) skcipher 10:14:25 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"271612d4ef904d51162cd8b87df0b66a", 0x0, 0x0, {0xf35800000000, 0xffffffff}, {0x8}, 0x8, [0x183700000000, 0xeb6b, 0x7ff, 0x4b3f, 0x5, 0x6, 0xffffffffffffffff, 0xc5, 0x0, 0x9, 0xffffffffffffffdb, 0x3, 0x40, 0x8, 0x4, 0x47ba]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"0a700cdc280a0ef1d9e3603e00093913", 0x0, r0, {0x100000001, 0x3}, {0x1f, 0x8}, 0x5, [0x8, 0x94, 0x7fff, 0x6, 0x10001, 0x4, 0x4c, 0x5, 0x5, 0x407e31cb, 0x912c, 0xf3b2, 0x7, 0x1, 0x401, 0x826f]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"271612d4ef904d51162cd8b87df0b66a", 0x0, 0x0, {0xf35800000000, 0xffffffff}, {0x8}, 0x8, [0x183700000000, 0xeb6b, 0x7ff, 0x4b3f, 0x5, 0x6, 0xffffffffffffffff, 0xc5, 0x0, 0x9, 0xffffffffffffffdb, 0x3, 0x40, 0x8, 0x4, 0x47ba]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"0a700cdc280a0ef1d9e3603e00093913", 0x0, r0, {0x100000001, 0x3}, {0x1f, 0x8}, 0x5, [0x8, 0x94, 0x7fff, 0x6, 0x10001, 0x4, 0x4c, 0x5, 0x5, 0x407e31cb, 0x912c, 0xf3b2, 0x7, 0x1, 0x401, 0x826f]}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) [ 203.628637][ T39] audit: type=1400 audit(1661595265.369:124): avc: denied { bind } for pid=3923 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 10:14:25 executing program 3: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"271612d4ef904d51162cd8b87df0b66a", 0x0, 0x0, {0xf35800000000, 0xffffffff}, {0x8}, 0x8, [0x183700000000, 0xeb6b, 0x7ff, 0x4b3f, 0x5, 0x6, 0xffffffffffffffff, 0xc5, 0x0, 0x9, 0xffffffffffffffdb, 0x3, 0x40, 0x8, 0x4, 0x47ba]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"0a700cdc280a0ef1d9e3603e00093913", 0x0, r0, {0x100000001, 0x3}, {0x1f, 0x8}, 0x5, [0x8, 0x94, 0x7fff, 0x6, 0x10001, 0x4, 0x4c, 0x5, 0x5, 0x407e31cb, 0x912c, 0xf3b2, 0x7, 0x1, 0x401, 0x826f]}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) [ 203.660690][ T39] audit: type=1400 audit(1661595265.379:125): avc: denied { create } for pid=3924 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 203.719381][ T39] audit: type=1400 audit(1661595265.379:126): avc: denied { write } for pid=3924 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 10:14:25 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001380)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000140)="9b", 0x1}], 0x1, &(0x7f0000001300)=[@dstaddrv6={0x1c, 0x84, 0xa, @mcast1}], 0x1c}, 0x0) [ 203.754841][ T39] audit: type=1400 audit(1661595265.429:127): avc: denied { accept } for pid=3923 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 203.784005][ T3927] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 203.792199][ T39] audit: type=1400 audit(1661595265.429:128): avc: denied { mounton } for pid=3926 comm="syz-executor.0" path="/syzkaller-testdir3208692834/syzkaller.k1gy2Q/26/file0" dev="sda1" ino=1163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 10:14:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x20044098) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnetconf={0x14, 0x48, 0x1}, 0x14}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipmr_newroute={0x24, 0x18, 0x400, 0x70bd28, 0x25dfdbfd, {0x80, 0x20, 0x14, 0x3, 0xfd, 0x2, 0x36, 0x7}, [@RTA_DPORT={0x6, 0x1d, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8d4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 10:14:25 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000001780)={0x0, @in, 0x0, 0x0, 0x7}, 0x98) [ 203.860562][ T39] audit: type=1400 audit(1661595265.439:129): avc: denied { setopt } for pid=3923 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 203.909686][ T39] audit: type=1400 audit(1661595265.449:130): avc: denied { read } for pid=3926 comm="syz-executor.0" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 203.957733][ T39] audit: type=1400 audit(1661595265.449:131): avc: denied { open } for pid=3926 comm="syz-executor.0" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 10:14:26 executing program 3: fcntl$getown(0xffffffffffffffff, 0x5) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f00000001c0), 0x1) bind$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) sendto(r0, &(0x7f0000000240)="90e19c44750a4213e14151d8f5a5900b8499382dda61dfd31deb99dddd7aab1371b40de4bbb857ecca095a51df88c7f93a6d94f853307273b7741f2ef033d9decdfadd6c25c3e8b80f23fc48ea000c27b669b137db2bd6ed95bbf103051e1eb8844a5ac07e22beaf20f62bd24248768e932f5cd2d2", 0xffc2, 0x0, 0x0, 0x0) close(r0) 10:14:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x20044098) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnetconf={0x14, 0x48, 0x1}, 0x14}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipmr_newroute={0x24, 0x18, 0x400, 0x70bd28, 0x25dfdbfd, {0x80, 0x20, 0x14, 0x3, 0xfd, 0x2, 0x36, 0x7}, [@RTA_DPORT={0x6, 0x1d, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8d4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 10:14:26 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000700)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@init={0x14}], 0x14}, 0x0) 10:14:26 executing program 2: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) (async) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="8c", 0x1) r3 = dup(r2) (async) r4 = open(&(0x7f0000000080)='./file1\x00', 0x1c982, 0xb0) ftruncate(r4, 0x200004) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0xfffffffffffffffc, 0x0) (async, rerun: 32) read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020) (async, rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) (async) sendfile(r3, r4, 0x0, 0x80001d00c0d1) (async) setsockopt(r3, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) [ 204.721132][ T3957] "syz-executor.2" (3957) uses obsolete ecb(arc4) skcipher 10:14:26 executing program 1: open$dir(&(0x7f0000000380)='./file1\x00', 0xa00, 0x0) 10:14:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000200)='./file0\x00', 0xb2707ab1068a1192, 0xc1) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"50ef7c2ff362935080fed2bdd95ca7e3", 0x0, 0x0, {0x20, 0x9}, {0x1, 0x4}, 0x0, [0x0, 0xc80, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6369, 0x9, 0xffffffffffff549c]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) preadv(r0, 0x0, 0x0, 0x4, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r7 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x80100, 0x86) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10:14:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0xb2707ab1068a1192, 0xc1) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"50ef7c2ff362935080fed2bdd95ca7e3", 0x0, 0x0, {0x20, 0x9}, {0x1, 0x4}, 0x0, [0x0, 0xc80, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6369, 0x9, 0xffffffffffff549c]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) preadv(r0, 0x0, 0x0, 0x4, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x80100, 0x86) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10:14:26 executing program 2: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) (async) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="8c", 0x1) (async) r3 = dup(r2) r4 = open(&(0x7f0000000080)='./file1\x00', 0x1c982, 0xb0) ftruncate(r4, 0x200004) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0xfffffffffffffffc, 0x0) read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) (async) sendfile(r3, r4, 0x0, 0x80001d00c0d1) (async) setsockopt(r3, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) [ 204.831552][ T3970] "syz-executor.2" (3970) uses obsolete ecb(arc4) skcipher 10:14:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpeername(r0, 0x0, &(0x7f0000000bc0)) 10:14:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0xb2707ab1068a1192, 0xc1) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"50ef7c2ff362935080fed2bdd95ca7e3", 0x0, 0x0, {0x20, 0x9}, {0x1, 0x4}, 0x0, [0x0, 0xc80, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6369, 0x9, 0xffffffffffff549c]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) preadv(r0, 0x0, 0x0, 0x4, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x80100, 0x86) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10:14:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x5, &(0x7f0000000000), 0x4) 10:14:27 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000000), 0x8) 10:14:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0xb2707ab1068a1192, 0xc1) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"50ef7c2ff362935080fed2bdd95ca7e3", 0x0, 0x0, {0x20, 0x9}, {0x1, 0x4}, 0x0, [0x0, 0xc80, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6369, 0x9, 0xffffffffffff549c]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) preadv(r0, 0x0, 0x0, 0x4, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x80100, 0x86) ioctl$KVM_RUN(r7, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) open(&(0x7f0000000200)='./file0\x00', 0xb2707ab1068a1192, 0xc1) (async) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"50ef7c2ff362935080fed2bdd95ca7e3", 0x0, 0x0, {0x20, 0x9}, {0x1, 0x4}, 0x0, [0x0, 0xc80, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6369, 0x9, 0xffffffffffff549c]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) preadv(r0, 0x0, 0x0, 0x4, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r5) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x80100, 0x86) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) 10:14:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), 0x98) 10:14:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@prinfo={0x14}], 0x14}, 0x184) 10:14:27 executing program 0: clock_nanosleep(0x4, 0x0, &(0x7f0000000000), 0x0) 10:14:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001280)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) 10:14:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000080)=0x20, 0x4) 10:14:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000000c0)=ANY=[], 0x2c) 10:14:27 executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f0000000040)=0x8) socket$inet6_sctp(0x1c, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r2, &(0x7f0000000140)={0x10, 0x2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20104, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x200}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 10:14:27 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 10:14:27 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f0000000040), 0x8) 10:14:27 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x84) 10:14:27 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) r2 = fcntl$dupfd(r0, 0x0, r1) sendto$inet6(r2, &(0x7f0000000280)=']', 0x1, 0x0, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c) 10:14:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000380)={0x0, @in, 0x0, 0x0, 0x191}, 0x98) 10:14:27 executing program 2: execve(0x0, &(0x7f0000000140)=[0x0], 0x0) 10:14:27 executing program 2: mount(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 10:14:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), &(0x7f00000000c0)=0x90) 10:14:27 executing program 3: execve(0x0, &(0x7f0000000100), &(0x7f0000000200)=[&(0x7f0000000140)='@[![+[$*\x00', &(0x7f0000000180)='\x00']) 10:14:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000280), &(0x7f0000000640)=0x98) 10:14:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x15, 0x0, 0x0) 10:14:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/238, 0xee}, 0x41) 10:14:28 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c) 10:14:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) 10:14:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f00000000c0)={0x0, 0xc5}, 0x8) 10:14:28 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 10:14:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x26, &(0x7f0000000000)={r3}, 0x8) 10:14:28 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) 10:14:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000026c0)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000016c0)={&(0x7f0000000140)=@in={0x10, 0x2}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000180)='\n', 0x1}], 0x1, &(0x7f0000000240)=[@authinfo={0x10}], 0x10}, 0x0) 10:14:28 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x15, &(0x7f0000000080)="ca1c5602009a43618188c729d91f6384", 0x10) 10:14:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x20044098) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getnetconf={0x14, 0x48, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipmr_newroute={0x24, 0x18, 0x400, 0x70bd28, 0x25dfdbfd, {0x80, 0x20, 0x14, 0x3, 0xfd, 0x2, 0x36, 0x7}, [@RTA_DPORT={0x6, 0x1d, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8d4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 10:14:28 executing program 1: r0 = fsopen(&(0x7f0000000380)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc77\xb2a\x10\xd7\xef\xc5\n2s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&,\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n://\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="8c", 0x1) r3 = dup(r2) r4 = open(&(0x7f0000000080)='./file1\x00', 0x1c982, 0xb0) ftruncate(r4, 0x200004) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0xfffffffffffffffc, 0x0) read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80001d00c0d1) setsockopt(r3, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) [ 207.038782][ T4069] "syz-executor.1" (4069) uses obsolete ecb(arc4) skcipher 10:14:28 executing program 2: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000019140)="068bfee0ded9819106e9508831d9e6aac70a5143be7d25bed695e7361aa96f95a51e836131c8b9ac9088c36b78b5af990c3e54a1a04779475c110d87910c94b9cd50bfc424f394aa7e1393f15704de57123143dd85024117965a197dc44d5cdce7c78ab317563cbce79aef2579705f1b378dffd1610bac0d1b34afbdddb5f758", 0x80}, {&(0x7f0000019240)="ca2cd190110e83c3d6a8c7c9df6d6fe3b6c2200c050dfe4707342f9298daed5d4ab3c450e4fcef38e3e9d4d293d24fb82f97d3059992408667cf2a057809b43717c75516b85c85630b25f99fb41db746fbd8cbcfe2d6811b2be039326ad75670f25fae30972288cb77090365c24f7e5da4ea88a610e777b31a2af3be06546fcdaaf95391a1f829b0eae7a967a3e8df1e80be2fe4f3db62981f17682a", 0x9c}, {&(0x7f0000019300)="be7ba11a45f54f1c4c326dd4914d67908ae7d40e265de4092ccd32482a41bcb42d893d2acbb404fdde8a2e678ad27f4ad8b01bbf6e98561b6be304056486ffe385182ca980b2302a0b4dcc00207c0c379a0c36750201bd1ebc5387126cfc99645d1150596ddad690900dfd8521c2a40fca04e79162c9037a613404a4f58a954896f1c8ff7fe9d616a247ee3409a2b01341836f8fbecd4e6abe3fa8a3d40ce140681fb659c78f2044a43fdf8ad6ad0aff0b6eadd19c7955dc67", 0xb9}, {&(0x7f0000000040)="734086d5f6cdf6df69db1999d4ca8962c44151d254e41c102cebb62066cd4741058c1698c35afdf5dc4d6b2da7fe4f26742501518e082d239ba96e", 0x3b}, {&(0x7f00000193c0)="c1de23b638906651418615c64087b537e49ef26fce024765613ad812f0f352d6437fc0f034c4dca5246b21bff0e3b6fd727f5af21b2fd3b287d9d50983c18e3409ace7915d7e2bb6899d517481a6a39dbcebaf2b91512644", 0x58}, {&(0x7f00000191c0)}], 0x6, 0x5e, 0x1, 0x0) ftruncate(r0, 0x208200) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)=ANY=[]) r2 = eventfd(0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102400, 0x19000) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000019200)={0x1, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000200)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000019540)=""/108, &(0x7f00000194c0)=""/78, 0xd000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r4 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x4002011, r4, 0x0) 10:14:28 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/147, &(0x7f0000000340)=0x93) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, 0x0, 0x0, 0x4, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9800}, 0x44) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:28 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095ab4dcbdf0090426e6f81d4a2e1afbcc8bbb43cac869458d190dc5378f0af40c9660dc8a92f788b57480523f1add3757fdc6bbde438666c67a88e1be4de9970477ebfc77ee338032ace861e58accab65f8ef4a916c468e1589ff17c0597511ce4a7f20930ecb0daa3a53457400a4c37da1b4641edaa0f8d3f9ae9ad82c14c9dfe4fab75d4d25acff6b16ccb9e49933090efff525bbc0195999c8e65f3e4b55b3afa"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 10:14:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)='O', 0x1}], 0x1, &(0x7f0000000640)=[@authinfo={0x10}], 0x10}, 0x0) 10:14:29 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/147, &(0x7f0000000340)=0x93) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, 0x0, 0x0, 0x4, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9800}, 0x44) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/147, &(0x7f0000000340)=0x93) (async) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) preadv(r3, 0x0, 0x0, 0x4, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9800}, 0x44) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) (async) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 10:14:29 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095ab4dcbdf0090426e6f81d4a2e1afbcc8bbb43cac869458d190dc5378f0af40c9660dc8a92f788b57480523f1add3757fdc6bbde438666c67a88e1be4de9970477ebfc77ee338032ace861e58accab65f8ef4a916c468e1589ff17c0597511ce4a7f20930ecb0daa3a53457400a4c37da1b4641edaa0f8d3f9ae9ad82c14c9dfe4fab75d4d25acff6b16ccb9e49933090efff525bbc0195999c8e65f3e4b55b3afa"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 10:14:29 executing program 2: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000019140)="068bfee0ded9819106e9508831d9e6aac70a5143be7d25bed695e7361aa96f95a51e836131c8b9ac9088c36b78b5af990c3e54a1a04779475c110d87910c94b9cd50bfc424f394aa7e1393f15704de57123143dd85024117965a197dc44d5cdce7c78ab317563cbce79aef2579705f1b378dffd1610bac0d1b34afbdddb5f758", 0x80}, {&(0x7f0000019240)="ca2cd190110e83c3d6a8c7c9df6d6fe3b6c2200c050dfe4707342f9298daed5d4ab3c450e4fcef38e3e9d4d293d24fb82f97d3059992408667cf2a057809b43717c75516b85c85630b25f99fb41db746fbd8cbcfe2d6811b2be039326ad75670f25fae30972288cb77090365c24f7e5da4ea88a610e777b31a2af3be06546fcdaaf95391a1f829b0eae7a967a3e8df1e80be2fe4f3db62981f17682a", 0x9c}, {&(0x7f0000019300)="be7ba11a45f54f1c4c326dd4914d67908ae7d40e265de4092ccd32482a41bcb42d893d2acbb404fdde8a2e678ad27f4ad8b01bbf6e98561b6be304056486ffe385182ca980b2302a0b4dcc00207c0c379a0c36750201bd1ebc5387126cfc99645d1150596ddad690900dfd8521c2a40fca04e79162c9037a613404a4f58a954896f1c8ff7fe9d616a247ee3409a2b01341836f8fbecd4e6abe3fa8a3d40ce140681fb659c78f2044a43fdf8ad6ad0aff0b6eadd19c7955dc67", 0xb9}, {&(0x7f0000000040)="734086d5f6cdf6df69db1999d4ca8962c44151d254e41c102cebb62066cd4741058c1698c35afdf5dc4d6b2da7fe4f26742501518e082d239ba96e", 0x3b}, {&(0x7f00000193c0)="c1de23b638906651418615c64087b537e49ef26fce024765613ad812f0f352d6437fc0f034c4dca5246b21bff0e3b6fd727f5af21b2fd3b287d9d50983c18e3409ace7915d7e2bb6899d517481a6a39dbcebaf2b91512644", 0x58}, {&(0x7f00000191c0)}], 0x6, 0x5e, 0x1, 0x0) ftruncate(r0, 0x208200) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)=ANY=[]) r2 = eventfd(0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102400, 0x19000) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000019200)={0x1, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000200)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000019540)=""/108, &(0x7f00000194c0)=""/78, 0xd000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r4 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x4002011, r4, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) pwritev2(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000019140)="068bfee0ded9819106e9508831d9e6aac70a5143be7d25bed695e7361aa96f95a51e836131c8b9ac9088c36b78b5af990c3e54a1a04779475c110d87910c94b9cd50bfc424f394aa7e1393f15704de57123143dd85024117965a197dc44d5cdce7c78ab317563cbce79aef2579705f1b378dffd1610bac0d1b34afbdddb5f758", 0x80}, {&(0x7f0000019240)="ca2cd190110e83c3d6a8c7c9df6d6fe3b6c2200c050dfe4707342f9298daed5d4ab3c450e4fcef38e3e9d4d293d24fb82f97d3059992408667cf2a057809b43717c75516b85c85630b25f99fb41db746fbd8cbcfe2d6811b2be039326ad75670f25fae30972288cb77090365c24f7e5da4ea88a610e777b31a2af3be06546fcdaaf95391a1f829b0eae7a967a3e8df1e80be2fe4f3db62981f17682a", 0x9c}, {&(0x7f0000019300)="be7ba11a45f54f1c4c326dd4914d67908ae7d40e265de4092ccd32482a41bcb42d893d2acbb404fdde8a2e678ad27f4ad8b01bbf6e98561b6be304056486ffe385182ca980b2302a0b4dcc00207c0c379a0c36750201bd1ebc5387126cfc99645d1150596ddad690900dfd8521c2a40fca04e79162c9037a613404a4f58a954896f1c8ff7fe9d616a247ee3409a2b01341836f8fbecd4e6abe3fa8a3d40ce140681fb659c78f2044a43fdf8ad6ad0aff0b6eadd19c7955dc67", 0xb9}, {&(0x7f0000000040)="734086d5f6cdf6df69db1999d4ca8962c44151d254e41c102cebb62066cd4741058c1698c35afdf5dc4d6b2da7fe4f26742501518e082d239ba96e", 0x3b}, {&(0x7f00000193c0)="c1de23b638906651418615c64087b537e49ef26fce024765613ad812f0f352d6437fc0f034c4dca5246b21bff0e3b6fd727f5af21b2fd3b287d9d50983c18e3409ace7915d7e2bb6899d517481a6a39dbcebaf2b91512644", 0x58}, {&(0x7f00000191c0)}], 0x6, 0x5e, 0x1, 0x0) (async) ftruncate(r0, 0x208200) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)=ANY=[]) (async) eventfd(0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) read$msr(r3, &(0x7f0000000140)=""/102400, 0x19000) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000019200)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000200)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000019540)=""/108, &(0x7f00000194c0)=""/78, 0xd000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async) open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x4002011, r4, 0x0) (async) 10:14:29 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c}, 0x1c) 10:14:29 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095ab4dcbdf0090426e6f81d4a2e1afbcc8bbb43cac869458d190dc5378f0af40c9660dc8a92f788b57480523f1add3757fdc6bbde438666c67a88e1be4de9970477ebfc77ee338032ace861e58accab65f8ef4a916c468e1589ff17c0597511ce4a7f20930ecb0daa3a53457400a4c37da1b4641edaa0f8d3f9ae9ad82c14c9dfe4fab75d4d25acff6b16ccb9e49933090efff525bbc0195999c8e65f3e4b55b3afa"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 10:14:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0xf}, 0xc) 10:14:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000026c0)={&(0x7f0000000200)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000000)={0x0, 0x0, 0x3}, &(0x7f0000000040)=0x18) 10:14:29 executing program 2: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000019140)="068bfee0ded9819106e9508831d9e6aac70a5143be7d25bed695e7361aa96f95a51e836131c8b9ac9088c36b78b5af990c3e54a1a04779475c110d87910c94b9cd50bfc424f394aa7e1393f15704de57123143dd85024117965a197dc44d5cdce7c78ab317563cbce79aef2579705f1b378dffd1610bac0d1b34afbdddb5f758", 0x80}, {&(0x7f0000019240)="ca2cd190110e83c3d6a8c7c9df6d6fe3b6c2200c050dfe4707342f9298daed5d4ab3c450e4fcef38e3e9d4d293d24fb82f97d3059992408667cf2a057809b43717c75516b85c85630b25f99fb41db746fbd8cbcfe2d6811b2be039326ad75670f25fae30972288cb77090365c24f7e5da4ea88a610e777b31a2af3be06546fcdaaf95391a1f829b0eae7a967a3e8df1e80be2fe4f3db62981f17682a", 0x9c}, {&(0x7f0000019300)="be7ba11a45f54f1c4c326dd4914d67908ae7d40e265de4092ccd32482a41bcb42d893d2acbb404fdde8a2e678ad27f4ad8b01bbf6e98561b6be304056486ffe385182ca980b2302a0b4dcc00207c0c379a0c36750201bd1ebc5387126cfc99645d1150596ddad690900dfd8521c2a40fca04e79162c9037a613404a4f58a954896f1c8ff7fe9d616a247ee3409a2b01341836f8fbecd4e6abe3fa8a3d40ce140681fb659c78f2044a43fdf8ad6ad0aff0b6eadd19c7955dc67", 0xb9}, {&(0x7f0000000040)="734086d5f6cdf6df69db1999d4ca8962c44151d254e41c102cebb62066cd4741058c1698c35afdf5dc4d6b2da7fe4f26742501518e082d239ba96e", 0x3b}, {&(0x7f00000193c0)="c1de23b638906651418615c64087b537e49ef26fce024765613ad812f0f352d6437fc0f034c4dca5246b21bff0e3b6fd727f5af21b2fd3b287d9d50983c18e3409ace7915d7e2bb6899d517481a6a39dbcebaf2b91512644", 0x58}, {&(0x7f00000191c0)}], 0x6, 0x5e, 0x1, 0x0) ftruncate(r0, 0x208200) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)=ANY=[]) r2 = eventfd(0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102400, 0x19000) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000019200)={0x1, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000200)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000019540)=""/108, &(0x7f00000194c0)=""/78, 0xd000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r4 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x4002011, r4, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) pwritev2(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000019140)="068bfee0ded9819106e9508831d9e6aac70a5143be7d25bed695e7361aa96f95a51e836131c8b9ac9088c36b78b5af990c3e54a1a04779475c110d87910c94b9cd50bfc424f394aa7e1393f15704de57123143dd85024117965a197dc44d5cdce7c78ab317563cbce79aef2579705f1b378dffd1610bac0d1b34afbdddb5f758", 0x80}, {&(0x7f0000019240)="ca2cd190110e83c3d6a8c7c9df6d6fe3b6c2200c050dfe4707342f9298daed5d4ab3c450e4fcef38e3e9d4d293d24fb82f97d3059992408667cf2a057809b43717c75516b85c85630b25f99fb41db746fbd8cbcfe2d6811b2be039326ad75670f25fae30972288cb77090365c24f7e5da4ea88a610e777b31a2af3be06546fcdaaf95391a1f829b0eae7a967a3e8df1e80be2fe4f3db62981f17682a", 0x9c}, {&(0x7f0000019300)="be7ba11a45f54f1c4c326dd4914d67908ae7d40e265de4092ccd32482a41bcb42d893d2acbb404fdde8a2e678ad27f4ad8b01bbf6e98561b6be304056486ffe385182ca980b2302a0b4dcc00207c0c379a0c36750201bd1ebc5387126cfc99645d1150596ddad690900dfd8521c2a40fca04e79162c9037a613404a4f58a954896f1c8ff7fe9d616a247ee3409a2b01341836f8fbecd4e6abe3fa8a3d40ce140681fb659c78f2044a43fdf8ad6ad0aff0b6eadd19c7955dc67", 0xb9}, {&(0x7f0000000040)="734086d5f6cdf6df69db1999d4ca8962c44151d254e41c102cebb62066cd4741058c1698c35afdf5dc4d6b2da7fe4f26742501518e082d239ba96e", 0x3b}, {&(0x7f00000193c0)="c1de23b638906651418615c64087b537e49ef26fce024765613ad812f0f352d6437fc0f034c4dca5246b21bff0e3b6fd727f5af21b2fd3b287d9d50983c18e3409ace7915d7e2bb6899d517481a6a39dbcebaf2b91512644", 0x58}, {&(0x7f00000191c0)}], 0x6, 0x5e, 0x1, 0x0) (async) ftruncate(r0, 0x208200) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)=ANY=[]) (async) eventfd(0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) read$msr(r3, &(0x7f0000000140)=""/102400, 0x19000) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000019200)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000200)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000019540)=""/108, &(0x7f00000194c0)=""/78, 0xd000}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async) open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x4002011, r4, 0x0) (async) 10:14:30 executing program 1: mount(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 10:14:30 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/147, &(0x7f0000000340)=0x93) (async) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) preadv(r3, 0x0, 0x0, 0x4, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9800}, 0x44) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:30 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000040), 0x88) [ 208.399797][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 208.399810][ T39] audit: type=1800 audit(1661595270.159:144): pid=4138 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=1153 res=0 errno=0 10:14:32 executing program 0: open(0x0, 0x2d0045, 0x0) 10:14:38 executing program 1: madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) 10:14:38 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="2b9a59e4643b", @local, @val, {@arp={0x806, @generic={0x1, 0x0, 0x6, 0x0, 0x0, @remote, "", @local, "fbf2f552ea985eb4bc96de195a5b1df1"}}}}, 0x0) 10:14:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000300)={r2}, 0x8) 10:14:38 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x100c, &(0x7f0000000200), 0x10) 10:14:38 executing program 0: mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 10:14:38 executing program 2: open(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 10:14:38 executing program 3: r0 = socket$inet6(0x18, 0x0, 0x0) getpeername$inet6(r0, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001940)) 10:14:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 216.324930][ T39] audit: type=1400 audit(1661595278.089:145): avc: denied { create } for pid=4165 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 10:14:38 executing program 3: semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)) 10:14:38 executing program 2: mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x42b9b085dfe5fb15, 0x10, 0xffffffffffffffff, 0x0) 10:14:38 executing program 0: fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 10:14:38 executing program 2: recvfrom$inet6(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18}, 0xc) 10:14:38 executing program 1: pipe2(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$getown(r0, 0x5) 10:14:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) 10:14:38 executing program 3: sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18}, 0xc) clock_gettime(0x3, &(0x7f0000000000)) 10:14:38 executing program 0: recvfrom$unix(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x0) 10:14:38 executing program 1: connect$unix(0xffffffffffffff9c, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) 10:14:38 executing program 2: socketpair(0x2, 0x0, 0x2, 0x0) 10:14:38 executing program 3: lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0) 10:14:38 executing program 2: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) 10:14:38 executing program 0: lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 10:14:38 executing program 1: connect$unix(0xffffffffffffff9c, 0x0, 0x0) 10:14:38 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001640)) 10:14:38 executing program 2: fchownat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0, 0x0, 0x0) 10:14:38 executing program 1: getgroups(0x8, &(0x7f0000000140)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) 10:14:38 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000040)=@raw=[@map_idx], &(0x7f00000000c0)='GPL\x00', 0x446, 0xcc, &(0x7f0000000100)=""/204, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket$inet6(0xa, 0x0, 0x0) 10:14:38 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000001680)) 10:14:38 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect(r0, &(0x7f0000000040), 0x10) 10:14:38 executing program 3: setgroups(0x1, &(0x7f0000000300)=[0x0]) 10:14:38 executing program 2: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0xffffffffffffffff}}) [ 216.511966][ T39] audit: type=1400 audit(1661595278.269:146): avc: denied { create } for pid=4210 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 10:14:38 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x1f800000) 10:14:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="f7"}) [ 216.528751][ T39] audit: type=1400 audit(1661595278.269:147): avc: denied { ioctl } for pid=4210 comm="syz-executor.1" path="socket:[33966]" dev="sockfs" ino=33966 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 10:14:38 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)) [ 216.546720][ T39] audit: type=1400 audit(1661595278.309:148): avc: denied { read write } for pid=4217 comm="syz-executor.1" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.563614][ T39] audit: type=1400 audit(1661595278.309:149): avc: denied { open } for pid=4217 comm="syz-executor.1" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.584048][ T39] audit: type=1400 audit(1661595278.309:150): avc: denied { ioctl } for pid=4217 comm="syz-executor.1" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.603610][ T39] audit: type=1400 audit(1661595278.349:151): avc: denied { read write } for pid=4219 comm="syz-executor.2" name="video36" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 216.618399][ T39] audit: type=1400 audit(1661595278.349:152): avc: denied { open } for pid=4219 comm="syz-executor.2" path="/dev/video36" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 216.638858][ T39] audit: type=1400 audit(1661595278.359:153): avc: denied { ioctl } for pid=4219 comm="syz-executor.2" path="/dev/video36" dev="devtmpfs" ino=987 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 10:14:38 executing program 1: syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11ff, 0x3331, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x20}}]}}}]}}]}}, 0x0) 10:14:38 executing program 2: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 10:14:38 executing program 3: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={0x0}, 0x10) 10:14:38 executing program 0: r0 = socket$inet(0x2, 0x40000006, 0x2) setreuid(0xffffffffffffffff, 0x0) bind(r0, &(0x7f0000000900), 0xe) socket$unix(0x1, 0x5, 0x0) 10:14:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x0) 10:14:38 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 10:14:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8914, &(0x7f0000000000)) 10:14:38 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sync() 10:14:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a40)={0x44, 0x0, &(0x7f0000000940)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 217.127432][ T171] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 217.142169][ T971] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 217.352501][ T971] usb 7-1: device descriptor read/64, error 18 [ 217.522138][ T171] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 217.622223][ T971] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 217.692622][ T171] usb 6-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.40 [ 217.701524][ T171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.709715][ T171] usb 6-1: Product: syz [ 217.713684][ T171] usb 6-1: Manufacturer: syz [ 217.717597][ T171] usb 6-1: SerialNumber: syz [ 217.804923][ T171] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 217.832033][ T971] usb 7-1: device descriptor read/64, error 18 [ 217.959594][ T971] usb usb7-port1: attempt power cycle [ 217.998692][ T3739] usb 6-1: USB disconnect, device number 2 [ 218.382029][ T971] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 218.482382][ T971] usb 7-1: Invalid ep0 maxpacket: 0 10:14:40 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/114, 0x72}, {0x0}, {&(0x7f00000006c0)=""/206, 0xce}], 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[@ANYBLOB="00fb5403acfcfc15c58d328d4b5c22509caa5d43f45e7b2e7e5a732a225c87c31283542d3830e42121beb21b847c2549e67665bdc89f5b5622ec305c3709769988511fb8593a32f7aa0a2623"], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) [ 218.632046][ T971] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 218.732265][ T971] usb 7-1: Invalid ep0 maxpacket: 0 [ 218.742027][ T971] usb usb7-port1: unable to enumerate USB device [ 219.940149][ T39] audit: type=1400 audit(1661595281.699:154): avc: denied { create } for pid=4249 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 10:14:41 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000740)={&(0x7f0000000440)=@pppol2tp, 0x80, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2}, 0x62) 10:14:41 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/114, 0x72}, {0x0}, {&(0x7f00000006c0)=""/206, 0xce}], 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[@ANYBLOB="00fb5403acfcfc15c58d328d4b5c22509caa5d43f45e7b2e7e5a732a225c87c31283542d3830e42121beb21b847c2549e67665bdc89f5b5622ec305c3709769988511fb8593a32f7aa0a2623"], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:14:41 executing program 1: r0 = io_uring_setup(0x271e, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000000c0), 0x1) 10:14:41 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/114, 0x72}, {0x0}, {&(0x7f00000006c0)=""/206, 0xce}], 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[@ANYBLOB="00fb5403acfcfc15c58d328d4b5c22509caa5d43f45e7b2e7e5a732a225c87c31283542d3830e42121beb21b847c2549e67665bdc89f5b5622ec305c3709769988511fb8593a32f7aa0a2623"], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:14:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/114, 0x72}, {0x0}, {&(0x7f00000006c0)=""/206, 0xce}], 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[@ANYBLOB="00fb5403acfcfc15c58d328d4b5c22509caa5d43f45e7b2e7e5a732a225c87c31283542d3830e42121beb21b847c2549e67665bdc89f5b5622ec305c3709769988511fb8593a32f7aa0a2623"], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:14:41 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/114, 0x72}, {0x0}, {&(0x7f00000006c0)=""/206, 0xce}], 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[@ANYBLOB="00fb5403acfcfc15c58d328d4b5c22509caa5d43f45e7b2e7e5a732a225c87c31283542d3830e42121beb21b847c2549e67665bdc89f5b5622ec305c3709769988511fb8593a32f7aa0a2623"], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:14:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/114, 0x72}, {0x0}, {&(0x7f00000006c0)=""/206, 0xce}], 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[@ANYBLOB="00fb5403acfcfc15c58d328d4b5c22509caa5d43f45e7b2e7e5a732a225c87c31283542d3830e42121beb21b847c2549e67665bdc89f5b5622ec305c3709769988511fb8593a32f7aa0a2623"], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:14:43 executing program 0: r0 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r0, 0x0) 10:14:43 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$IMGETVERSION(r0, 0x80044942, 0x0) 10:14:43 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x0, 0x0, "e9a9b22f8d7a9ada04cc3931ac180dc208bc9981ffc8bdc1"}) [ 221.730142][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 221.730161][ T39] audit: type=1400 audit(1661595283.489:160): avc: denied { ioctl } for pid=4279 comm="syz-executor.2" path="socket:[34022]" dev="sockfs" ino=34022 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 10:14:43 executing program 1: syz_init_net_socket$ax25(0x3, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) 10:14:43 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/114, 0x72}, {0x0}, {0x0}], 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[@ANYBLOB="00fb5403acfcfc15c58d328d4b5c22509caa5d43f45e7b2e7e5a732a225c87c31283542d3830e42121beb21b847c2549e67665bdc89f5b5622ec305c3709769988511fb8593a32f7aa0a2623"], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:14:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x0, 0x0, 0x0, {{0x0, 0x2}}}]}]}]}}]}, 0x50}}, 0x0) 10:14:43 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/114, 0x72}, {&(0x7f00000006c0)=""/206, 0xce}], 0x4, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) [ 221.963946][ T39] audit: type=1400 audit(1661595283.569:161): avc: denied { create } for pid=4282 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 222.084067][ T39] audit: type=1400 audit(1661595283.709:162): avc: denied { create } for pid=4289 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 222.168481][ T39] audit: type=1400 audit(1661595283.709:163): avc: denied { bind } for pid=4289 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 10:14:44 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 10:14:44 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x69, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41b}}, {0x0, 0x0}]}) 10:14:44 executing program 0: kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) getpgrp(0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 222.982192][ T171] usb 8-1: new high-speed USB device number 2 using dummy_hcd 10:14:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/114, 0x72}, {&(0x7f00000006c0)=""/206, 0xce}], 0x4, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) [ 223.103232][ T971] usb 5-1: new high-speed USB device number 2 using dummy_hcd 10:14:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/114, 0x72}, {0x0}, {0x0}], 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[@ANYBLOB="00fb5403acfcfc15c58d328d4b5c22509caa5d43f45e7b2e7e5a732a225c87c31283542d3830e42121beb21b847c2549e67665bdc89f5b5622ec305c3709769988511fb8593a32f7aa0a2623"], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) [ 223.352219][ T171] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.360581][ T171] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.682306][ T971] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.690787][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.702145][ T971] usb 5-1: Product: syz [ 223.713242][ T971] usb 5-1: Manufacturer: syz [ 223.743411][ T971] usb 5-1: SerialNumber: syz [ 223.772261][ T171] usb 8-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.40 [ 223.778847][ T171] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.785218][ T171] usb 8-1: Product: Л [ 223.788372][ T171] usb 8-1: Manufacturer: ї [ 223.793825][ T971] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 224.080992][ T171] usbhid 8-1:1.0: can't add hid device: -22 [ 224.086277][ T171] usbhid: probe of 8-1:1.0 failed with error -22 [ 224.126602][ T171] usb 8-1: USB disconnect, device number 2 [ 224.573367][ T971] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 224.782016][ T40] usb 5-1: USB disconnect, device number 2 10:14:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/114, 0x72}, {&(0x7f00000006c0)=""/206, 0xce}], 0x4, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:14:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/114, 0x72}, {0x0}, {0x0}], 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[@ANYBLOB="00fb5403acfcfc15c58d328d4b5c22509caa5d43f45e7b2e7e5a732a225c87c31283542d3830e42121beb21b847c2549e67665bdc89f5b5622ec305c3709769988511fb8593a32f7aa0a2623"], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:14:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/114, 0x72}, {0x0}, {0x0}], 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[@ANYBLOB="00fb5403acfcfc15c58d328d4b5c22509caa5d43f45e7b2e7e5a732a225c87c31283542d3830e42121beb21b847c2549e67665bdc89f5b5622ec305c3709769988511fb8593a32f7aa0a2623"], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) [ 225.622293][ T971] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 225.628959][ T971] ath9k_htc: Failed to initialize the device [ 225.648181][ T40] usb 5-1: ath9k_htc: USB layer deinitialized 10:14:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/114, 0x72}, {0x0}, {0x0}], 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[@ANYBLOB="00fb5403acfcfc15c58d328d4b5c22509caa5d43f45e7b2e7e5a732a225c87c31283542d3830e42121beb21b847c2549e67665bdc89f5b5622ec305c3709769988511fb8593a32f7aa0a2623"], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:14:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/114, 0x72}, {0x0}, {0x0}], 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[@ANYBLOB="00fb5403acfcfc15c58d328d4b5c22509caa5d43f45e7b2e7e5a732a225c87c31283542d3830e42121beb21b847c2549e67665bdc89f5b5622ec305c3709769988511fb8593a32f7aa0a2623"], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:14:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/16, 0x10}, {0x0}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f0000000400)=""/104, 0x68}], 0x6, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/114, 0x72}, {&(0x7f00000006c0)=""/206, 0xce}], 0x4, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000006800), 0xc, 0x0}, 0x44800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) setxattr$trusted_overlay_upper(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f0000001a00)=ANY=[], 0x54, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:14:48 executing program 2: syz_mount_image$reiserfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001400)=[{&(0x7f0000001540)="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", 0xffa, 0x7}, {&(0x7f0000001340)="85", 0x1, 0x7fff}], 0x0, 0x0) 10:14:48 executing program 1: name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0xc00) [ 227.107874][ T4335] loop2: detected capacity change from 0 to 127 [ 227.215764][ T4158] I/O error, dev loop2, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 10:14:49 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x6d00, &(0x7f0000001100)=@raw=[@ldst], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:14:49 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) [ 227.444185][ T4343] REISERFS warning (device loop2): super-6508 reiserfs_parse_options: bad value 0x7fffffffffffffff for -ocommit [ 227.444185][ T4343] 10:14:49 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpeername$qrtr(r0, 0x0, 0x0) 10:14:49 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) [ 227.839883][ T4350] REISERFS warning (device loop2): super-6508 reiserfs_parse_options: bad value 0x7fffffffffffffff for -ocommit [ 227.839883][ T4350] 10:14:50 executing program 3: socket(0x23, 0x0, 0x8) 10:14:50 executing program 1: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x2000, &(0x7f0000000580)) 10:14:50 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) [ 228.369804][ T4354] REISERFS warning (device loop2): super-6508 reiserfs_parse_options: bad value 0x7fffffffffffffff for -ocommit [ 228.369804][ T4354] [ 228.415113][ T39] audit: type=1400 audit(1661595290.179:164): avc: denied { create } for pid=4357 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 10:14:50 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x80001) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0x1800) 10:14:50 executing program 1: execveat(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x0, &(0x7f0000000b00)=[&(0x7f0000000980)='/dev/ocfs2_control\x00', &(0x7f00000009c0)='/dev/ocfs2_control\x00'], 0x1000) 10:14:50 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) [ 228.502135][ T4361] process 'syz-executor.1' launched '/dev/fd/-1/./file0' with NULL argv: empty string added 10:14:50 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) 10:14:50 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0x6, 0x4) [ 228.535842][ T4365] REISERFS warning (device loop2): super-6508 reiserfs_parse_options: bad value 0x7fffffffffffffff for -ocommit [ 228.535842][ T4365] [ 228.552146][ T4368] REISERFS warning (device loop0): jmacd-7 reiserfs_fill_super: resize option for remount only [ 228.561118][ T39] audit: type=1400 audit(1661595290.319:165): avc: denied { setopt } for pid=4370 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 10:14:50 executing program 1: getpid() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10:14:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', 0x0}) [ 228.892195][ T3742] usb 6-1: new high-speed USB device number 3 using dummy_hcd 10:14:50 executing program 2: syz_mount_image$reiserfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) 10:14:50 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) 10:14:50 executing program 2: syz_mount_image$reiserfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) [ 228.912307][ T4381] REISERFS warning (device loop0): jmacd-7 reiserfs_fill_super: resize option for remount only 10:14:50 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) 10:14:50 executing program 2: syz_mount_image$reiserfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) 10:14:50 executing program 3: r0 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) r2 = getpgrp(r0) r3 = getpgrp(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00') r4 = getpgrp(r0) r5 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, 0xffffffffffffffff, 0x0) r6 = getpid() r7 = getpgrp(r1) r8 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) write$damon_target_ids(0xffffffffffffffff, &(0x7f00000000c0)={@val, [{' ', r2}, {' ', r3}, {}, {' ', r4}, {' ', r5}, {' ', r6}, {' ', r7}, {' ', r8}]}, 0xb0) getpid() syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) [ 229.056681][ T4386] REISERFS warning (device loop0): jmacd-7 reiserfs_fill_super: resize option for remount only [ 229.332037][ T171] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 229.482552][ T3742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 229.489880][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.498363][ T3742] usb 6-1: Product: syz [ 229.502327][ T3742] usb 6-1: Manufacturer: syz [ 229.506823][ T3742] usb 6-1: SerialNumber: syz [ 229.572896][ T3742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 229.902299][ T171] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 229.909708][ T171] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.915688][ T171] usb 8-1: Product: syz [ 229.918642][ T171] usb 8-1: Manufacturer: syz [ 229.922280][ T171] usb 8-1: SerialNumber: syz [ 229.963281][ T171] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 230.192237][ T3742] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 230.395745][ T971] usb 6-1: USB disconnect, device number 3 [ 230.602207][ T171] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 230.807429][ T24] usb 8-1: USB disconnect, device number 3 [ 231.032463][ T4397] REISERFS warning (device loop0): jmacd-7 reiserfs_fill_super: resize option for remount only 10:14:52 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) 10:14:52 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000140)='\x8cY\xf5\xd3\x13\xb4}\xf7\x8cv\xd7\x04O-\xe0+\x02\xa1\x16\xf1?\x1c\xc6\x92\x9e\xc7P\x1b\xfe\x17K(\xa1bq\xb1\xac\xed&/\xc2\xa5\xe0\xa8\t\xa8\xbf\xd9\x13\xc4\xec*l\xcf\xd7\xcd\xea\xa3\xfb\x81y\xe0\x87\x17\x1e\x9d\xa5|\x9e\xaa\xf0\xc6\x0f\xe91\x02\x8d\v\x97\"a\xf3?\x88\x13\xb5\xf6\x9d\xf2\xf4?\"\xb2\x06\xe1\xb2Ij\xff\xac\xa6\xf7\xc0\xa9\xcb\xbat\xf0m\xa7\x1f\xbdu\x9c\xff\x00\xc8\x8e$\xf3\x0e\x9ad\x10U\x10b\x1a\xafsM\xbd\xab\xd0=\xa0\xe6\x95J\x18\x97', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) 10:14:52 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) 10:14:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8983, 0x0) [ 231.222083][ T3742] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 231.227125][ T3742] ath9k_htc: Failed to initialize the device [ 231.238857][ T971] usb 6-1: ath9k_htc: USB layer deinitialized 10:14:53 executing program 1: r0 = getpid() r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10:14:53 executing program 0: syz_mount_image$reiserfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) 10:14:53 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) 10:14:53 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000007c0)=0x1f, 0x4) 10:14:53 executing program 0: syz_mount_image$reiserfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) 10:14:53 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x8, "77a26c", 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, 0x0) [ 231.390425][ T39] audit: type=1400 audit(1661595293.149:166): avc: denied { create } for pid=4407 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 231.409709][ T39] audit: type=1400 audit(1661595293.149:167): avc: denied { setopt } for pid=4407 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 10:14:53 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) 10:14:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000080)="2fdeaab519b1d413355e0bd0c8ac9ff9d99b5854d3bfe497331d5581fe18040f77919d398855d7f981feea481008e9d9c8725f1d32af22ea8013c7eca2a5ece457ed5ea23059d9eb2c459e424f0395e6ce52d6b78a6cb0515e424389b65267c3cc3e759c7c066f95e21d693ed23e5ec2c45ea715ea37f2b3f3f2cb97a9dbdb67571b56d85a23f20add727504f40c0d2e", 0x90) 10:14:53 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdc030000}, [@jmp={0x5, 0x0, 0xb}]}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xe6, &(0x7f0000000240)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 231.606365][ T39] audit: type=1400 audit(1661595293.369:168): avc: denied { prog_run } for pid=4417 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 231.702254][ T171] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 231.708330][ T171] ath9k_htc: Failed to initialize the device [ 231.715725][ T24] usb 8-1: ath9k_htc: USB layer deinitialized [ 231.766867][ T971] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 232.362309][ T971] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 232.370221][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.379141][ T971] usb 6-1: Product: syz [ 232.384482][ T971] usb 6-1: Manufacturer: syz [ 232.389600][ T971] usb 6-1: SerialNumber: syz [ 232.445929][ T971] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 233.072176][ T971] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.276661][ T3744] usb 6-1: USB disconnect, device number 4 [ 234.092611][ T971] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 234.099447][ T971] ath9k_htc: Failed to initialize the device 10:14:55 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@jmp={0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x85200000}]}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xe6, &(0x7f0000000240)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:14:55 executing program 0: syz_mount_image$reiserfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) [ 234.115490][ T3744] usb 6-1: ath9k_htc: USB layer deinitialized 10:14:55 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) 10:14:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10:14:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 10:14:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}]}]}, 0x20}}, 0x0) 10:14:55 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) 10:14:55 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) 10:14:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "acf9246f40ca52d3"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, "2ad89eead0dbfa4a"}) [ 234.235034][ T39] audit: type=1400 audit(1661595295.999:169): avc: denied { write } for pid=4430 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 234.248837][ T4432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2570 sclass=netlink_tcpdiag_socket pid=4432 comm=syz-executor.1 10:14:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "acf9246f40ca52d3"}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, "2ad89eead0dbfa4a"}) 10:14:56 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) 10:14:56 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) 10:14:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 10:14:56 executing program 3: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = syz_clone(0x28c0000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="e225be8fbc0d23aa50e94bb181684aa18c853d4e366f141bdaf6eec601fcecb843c4") ioprio_set$pid(0x1, r0, 0x0) syz_clone(0x40000300, &(0x7f00000001c0)="d0f3cce71c95b31730a6f868a58ebd4c1be6cb9cd1a14108faf73f37e15e4334015beca0208a2fbe3bd8a13c319f6bde0cd463557ce235e35a954e3e8cd5f72fb54227cc097e07de08e43a264befdfe6e5aaeb2cbeb537694a1044d7bfeac38ec707a2d253aad6a524476b18a90cf51d7a0235e9785fbfcc60fd43c82292ab64f0aa8f7e3076071386b5974c8ad2fae694505bd63248229c9385e159200e590e92dd42d85cb6a53c796372ce3f6f462bb47a25bcb02c30b1cd2164c2ad467d50500f42a7baddf7167033d5784859ef6e0a8533089b24c048c49a", 0xda, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="f40958596610ed7b9ac215ffb2a25ead97c6ef6cb480b2d70d3a7acb99179684c3db3b9af1292be8090cdf5c6de786d0c16121567163ae5d98a028539fc67d464573fd0fe1849cb2d36c43f057a64163aecf2f93459cf53a62a6bd10cb9a5b3ca629f8b00110068a0e8d7cc20345c918dc235442bd730aee35389147e5393ae9fd8ad9e62a99059d5cf99d9bf59f291677") syz_clone(0x500, &(0x7f0000000400)="06e68080c67d748623f694f8a1d316e5c6611e845250d3d15c0e8ce20747f07fcc22994ffb06", 0x26, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="89404be2fdf84fe6570ae3b5fe8a628ae43c456a76be967e3ccece55fd91e1d2ee9926583afcd62e3bc1edc8ca9872fc65cff058c5e33b75") 10:14:56 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) 10:14:56 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) [ 234.592507][ T4450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2570 sclass=netlink_tcpdiag_socket pid=4450 comm=syz-executor.1 [ 234.802568][ T4461] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2570 sclass=netlink_tcpdiag_socket pid=4461 comm=syz-executor.1 10:14:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 10:14:56 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 10:14:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x90) 10:14:56 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) 10:14:56 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 10:14:56 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) 10:14:56 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x90) 10:14:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 10:14:56 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x00000000000001']) 10:14:56 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0xa0e02, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x5) write$dsp(r0, &(0x7f00000000c0), 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000180)=0x1) [ 234.891497][ T4471] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2570 sclass=netlink_tcpdiag_socket pid=4471 comm=syz-executor.1 10:14:56 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) [ 234.952097][ T4475] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=\" 10:14:56 executing program 3: pipe(&(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000001a40)=[{0x0}, {0x0}, {&(0x7f0000001880)="d9", 0x1}], 0x3, 0x0) 10:14:56 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 10:14:56 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 10:14:56 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) 10:14:56 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff5}, [@jmp={0x6, 0x0, 0xb}]}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xe6, &(0x7f0000000240)=""/230, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 235.087851][ T4484] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=\" [ 235.286220][ T4492] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=\" 10:14:57 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) 10:14:57 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 10:14:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f0000000600)={'syztnl0\x00', 0x0}) 10:14:57 executing program 3: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000019140)="068bfee0ded9819106e9508831d9e6aac70a5143be7d25bed695e7361aa96f95a51e836131c8b9ac9088c36b78b5af990c3e54a1a04779475c110d87910c94b9cd50bfc424f394aa7e1393f15704de57123143dd85024117965a197dc44d5cdce7c78ab317563cbce79aef2579705f1b378dffd1610bac0d1b34afbdddb5f758", 0x80}, {&(0x7f0000019240)="ca2cd190110e83c3d6a8c7c9df6d6fe3b6c2200c050dfe4707342f9298daed5d4ab3c450e4fcef38e3e9d4d293d24fb82f97d3059992408667cf2a057809b43717c75516b85c85630b25f99fb41db746fbd8cbcfe2d6811b2be039326ad75670f25fae30972288cb77090365c24f7e5da4ea88a610e777b31a2af3be06546fcdaaf95391a1f829b0eae7a967a3e8df1e80be2fe4f3db62981f17682a", 0x9c}, {&(0x7f0000019300)="be7ba11a45f54f1c4c326dd4914d67908ae7d40e265de4092ccd32482a41bcb42d893d2acbb404fdde8a2e678ad27f4ad8b01bbf6e98561b6be304056486ffe385182ca980b2302a0b4dcc00207c0c379a0c36750201bd1ebc5387126cfc99645d1150596ddad690900dfd8521c2a40fca04e79162c9037a613404a4f58a954896f1c8ff7fe9d616a247ee3409a2b01341836f8fbecd4e6abe3fa8a3d40ce140681fb659c78f2044a43fdf8ad6ad0aff0b6eadd19c7955dc67", 0xb9}, {&(0x7f0000000040)="734086d5f6cdf6df69db1999d4ca8962c44151d254e41c102cebb62066cd4741058c1698c35afdf5dc4d6b2da7fe4f26742501518e082d239ba96e", 0x3b}, {&(0x7f00000193c0)="c1de23b638906651418615c64087b537e49ef26fce024765613ad812f0f352d6437fc0f034c4dca5246b21bff0e3b6fd727f5af21b2fd3b287d9d50983c18e3409ace7915d7e2bb6899d517481a6a39dbcebaf2b91512644", 0x58}, {&(0x7f00000191c0)}], 0x6, 0x5e, 0x1, 0x0) ftruncate(r0, 0x208200) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)=ANY=[]) r2 = eventfd(0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102400, 0x19000) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000019200)={0x1, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000200)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000019540)=""/108, &(0x7f00000194c0)=""/78, 0xd000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r4 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x4002011, r4, 0x0) 10:14:57 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[]) 10:14:57 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) [ 235.375128][ T4503] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 235.395788][ T4504] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=\" 10:14:57 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[]) 10:14:57 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) [ 235.886816][ T4511] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=\" [ 235.918954][ T4514] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 10:14:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x90) 10:14:58 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}]}) 10:14:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1e, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x90) 10:14:58 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[]) 10:14:58 executing program 1: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = syz_clone(0x28c0000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="e225be8fbc0d23aa50e94bb181684aa18c853d4e366f141bdaf6eec601fcecb843c4fbfe") ioprio_set$pid(0x1, r0, 0x0) syz_clone(0x40000300, &(0x7f00000001c0)="d0f3cce71c95b31730a6f868a58ebd4c1be6cb9cd1a14108faf73f37e15e4334015beca0208a2fbe3bd8a13c319f6bde0cd463557ce235e35a954e3e8cd5f72fb54227cc097e07de08e43a264befdfe6e5aaeb2cbeb537694a1044d7bfeac38ec707a2d253aad6a524476b18a90cf51d7a0235e9785fbfcc60fd43c82292ab64f0aa8f7e3076071386b5974c8ad2fae694505bd63248229c9385e159200e590e92dd42d85cb6a53c796372ce3f6f462bb47a25bcb02c30b1cd2164c2ad467d", 0xbf, 0x0, &(0x7f0000000300), &(0x7f0000000340)="f40958596610ed7b9ac215ffb2a25ead97c6ef6cb480b2d70d3a7acb99179684c3db3b9af1292be8090cdf5c6de786d0c16121567163ae5d98a028539fc67d464573fd0fe1849cb2d36c43f057a64163aecf2f93459cf53a62a6bd10cb9a5b3ca629f8b00110068a0e8d7cc20345c918dc235442bd730aee35389147e5393ae9fd8ad9e62a99059d5cf99d9bf59f291677") [ 236.397294][ T4519] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 236.402243][ T4527] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=\" [ 236.624314][ T4530] binder: 4529:4530 unknown command 0 [ 236.652031][ T4530] binder: 4529:4530 ioctl c0306201 20000300 returned -22 [ 236.695193][ T39] audit: type=1400 audit(1661595298.459:170): avc: denied { write } for pid=4534 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 236.719475][ T4533] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 10:14:58 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done={0x630d}], 0x0, 0x0, 0x0}) 10:14:58 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) 10:14:58 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x20) [ 236.751040][ T4538] REISERFS warning (device loop2): super-6508 reiserfs_parse_options: bad value 0x7fffffffffffffff for -ocommit [ 236.751040][ T4538] 10:14:58 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@commit={'commit', 0x3d, 0x7fffffffffffffff}}]}) 10:14:58 executing program 1: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000019140)="068bfee0ded9819106e9508831d9e6aac70a5143be7d25bed695e7361aa96f95a51e836131c8b9ac9088c36b78b5af990c3e54a1a04779475c110d87910c94b9cd50bfc424f394aa7e1393f15704de57123143dd85024117965a197dc44d5cdce7c78ab317563cbce79aef2579705f1b378dffd1610bac0d1b34afbdddb5f758", 0x80}, {&(0x7f0000019240)="ca2cd190110e83c3d6a8c7c9df6d6fe3b6c2200c050dfe4707342f9298daed5d4ab3c450e4fcef38e3e9d4d293d24fb82f97d3059992408667cf2a057809b43717c75516b85c85630b25f99fb41db746fbd8cbcfe2d6811b2be039326ad75670f25fae30972288cb77090365c24f7e5da4ea88a610e777b31a2af3be06546fcdaaf95391a1f829b0eae7a967a3e8df1e80be2fe4f3db62981f17682a", 0x9c}, {&(0x7f0000019300)="be7ba11a45f54f1c4c326dd4914d67908ae7d40e265de4092ccd32482a41bcb42d893d2acbb404fdde8a2e678ad27f4ad8b01bbf6e98561b6be304056486ffe385182ca980b2302a0b4dcc00207c0c379a0c36750201bd1ebc5387126cfc99645d1150596ddad690900dfd8521c2a40fca04e79162c9037a613404a4f58a954896f1c8ff7fe9d616a247ee3409a2b01341836f8fbecd4e6abe3fa8a3d40ce140681fb659c78f2044a43fdf8ad6ad0aff0b6eadd19c7955dc67", 0xb9}, {&(0x7f0000000040)="734086d5f6cdf6df69db1999d4ca8962c44151d254e41c102cebb62066cd4741058c1698c35afdf5dc4d6b2da7fe4f26742501518e082d239ba96e", 0x3b}, {&(0x7f00000193c0)="c1de23b638906651418615c64087b537e49ef26fce024765613ad812f0f352d6437fc0f034c4dca5246b21bff0e3b6fd727f5af21b2fd3b287d9d50983c18e3409ace7915d7e2bb6899d517481a6a39dbcebaf2b91512644", 0x58}, {&(0x7f00000191c0)}], 0x6, 0x5e, 0x1, 0x0) ftruncate(r0, 0x208200) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)=ANY=[]) r2 = eventfd(0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102400, 0x19000) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000019200)={0x1, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000200)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000019540)=""/108, &(0x7f00000194c0)=""/78, 0xd000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r4 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x4002011, r4, 0x0) 10:14:58 executing program 3: r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000019140)="068bfee0ded9819106e9508831d9e6aac70a5143be7d25bed695e7361aa96f95a51e836131c8b9ac9088c36b78b5af990c3e54a1a04779475c110d87910c94b9cd50bfc424f394aa7e1393f15704de57123143dd85024117965a197dc44d5cdce7c78ab317563cbce79aef2579705f1b378dffd1610bac0d1b34afbdddb5f758", 0x80}, {&(0x7f0000019240)="ca2cd190110e83c3d6a8c7c9df6d6fe3b6c2200c050dfe4707342f9298daed5d4ab3c450e4fcef38e3e9d4d293d24fb82f97d3059992408667cf2a057809b43717c75516b85c85630b25f99fb41db746fbd8cbcfe2d6811b2be039326ad75670f25fae30972288cb77090365c24f7e5da4ea88a610e777b31a2af3be06546fcdaaf95391a1f829b0eae7a967a3e8df1e80be2fe4f3db62981f17682a", 0x9c}, {&(0x7f0000019300)="be7ba11a45f54f1c4c326dd4914d67908ae7d40e265de4092ccd32482a41bcb42d893d2acbb404fdde8a2e678ad27f4ad8b01bbf6e98561b6be304056486ffe385182ca980b2302a0b4dcc00207c0c379a0c36750201bd1ebc5387126cfc99645d1150596ddad690900dfd8521c2a40fca04e79162c9037a613404a4f58a954896f1c8ff7fe9d616a247ee3409a2b01341836f8fbecd4e6abe3fa8a3d40ce140681fb659c78f2044a43fdf8ad6ad0aff0b6eadd19c7955dc67", 0xb9}, {&(0x7f0000000040)="734086d5f6cdf6df69db1999d4ca8962c44151d254e41c102cebb62066cd4741058c1698c35afdf5dc4d6b2da7fe4f26742501518e082d239ba96e", 0x3b}, {&(0x7f00000193c0)="c1de23b638906651418615c64087b537e49ef26fce024765613ad812f0f352d6437fc0f034c4dca5246b21bff0e3b6fd727f5af21b2fd3b287d9d50983c18e3409ace7915d7e2bb6899d517481a6a39dbcebaf2b91512644", 0x58}, {&(0x7f00000191c0)}], 0x6, 0x5e, 0x1, 0x0) ftruncate(r0, 0x208200) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)=ANY=[]) r2 = eventfd(0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000140)=""/102400, 0x19000) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000019200)={0x1, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000200)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000019540)=""/108, &(0x7f00000194c0)=""/78, 0xd000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r4 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff6, 0x4002011, r4, 0x0) 10:14:58 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) [ 236.856552][ T4548] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 10:14:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) r5 = syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) syz_usb_disconnect(r5) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001780)=0x5) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000001800)=""/183) [ 237.120950][ T39] audit: type=1400 audit(1661595298.879:171): avc: denied { read append } for pid=4553 comm="syz-executor.2" name="event3" dev="devtmpfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 10:14:58 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) [ 237.167670][ T39] audit: type=1400 audit(1661595298.879:172): avc: denied { open } for pid=4553 comm="syz-executor.2" path="/dev/input/event3" dev="devtmpfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 237.194678][ T4556] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 237.214520][ T39] audit: type=1400 audit(1661595298.949:173): avc: denied { ioctl } for pid=4553 comm="syz-executor.2" path="/dev/input/event0" dev="devtmpfs" ino=861 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 237.481969][ T1268] usb 7-1: new high-speed USB device number 6 using dummy_hcd 10:14:59 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x000']) [ 237.685677][ T4562] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 237.762141][ T1268] usb 7-1: Using ep0 maxpacket: 16 10:14:59 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000001540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 10:14:59 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 10:14:59 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x000']) 10:14:59 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000001540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 237.815151][ T4570] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 10:14:59 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x000']) [ 237.928213][ T4574] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 238.012256][ T1268] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 238.018499][ T1268] usb 7-1: config 1 has no interface number 1 [ 238.022864][ T1268] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 238.062012][ T3743] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 238.093816][ T48] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 238.232368][ T1268] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.239203][ T1268] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.244827][ T1268] usb 7-1: Product: syz [ 238.247506][ T1268] usb 7-1: Manufacturer: syz [ 238.250458][ T1268] usb 7-1: SerialNumber: syz [ 238.312230][ T3743] usb 8-1: Using ep0 maxpacket: 16 [ 238.352026][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 238.442281][ T3743] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 238.449120][ T3743] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 238.457781][ T3743] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.502386][ T48] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 238.510091][ T48] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 238.518521][ T48] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.603040][ T1268] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 238.609630][ T1268] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 238.642071][ T3743] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.647947][ T3743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.654163][ T3743] usb 8-1: Product: syz [ 238.657316][ T1268] usb 7-1: USB disconnect, device number 6 [ 238.660716][ T3743] usb 8-1: Manufacturer: syz [ 238.666257][ T3743] usb 8-1: SerialNumber: syz [ 238.730984][ T4158] udevd[4158]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.732098][ T48] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.749008][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.755605][ T48] usb 6-1: Product: syz [ 238.758262][ T48] usb 6-1: Manufacturer: syz [ 238.761137][ T48] usb 6-1: SerialNumber: syz [ 238.992716][ T3743] usb 8-1: 0:2 : does not exist [ 239.007412][ T3743] usb 8-1: USB disconnect, device number 4 [ 239.302508][ T48] usb 6-1: 0:2 : does not exist [ 239.314959][ T48] usb 6-1: USB disconnect, device number 5 [ 239.318633][ T4577] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 10:15:01 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x000000000']) [ 239.402763][ T4241] udevd[4241]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.411511][ T4158] udevd[4158]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 10:15:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) r5 = syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) syz_usb_disconnect(r5) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001780)=0x5) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000001800)=""/183) 10:15:01 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x000000000']) 10:15:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) r5 = syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) syz_usb_disconnect(r5) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001780)=0x5) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000001800)=""/183) [ 239.545851][ T4580] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 239.892188][ T3742] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 239.907067][ T3743] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 240.078226][ T4591] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 240.152001][ T3742] usb 7-1: Using ep0 maxpacket: 16 10:15:01 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x000000000']) 10:15:01 executing program 1: io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={[0x9]}, 0x8}) [ 240.184061][ T3743] usb 8-1: Using ep0 maxpacket: 16 10:15:01 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000700), 0x24000, 0x0) 10:15:01 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 10:15:02 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x000000000000']) [ 240.248755][ T4597] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 240.382259][ T3742] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 240.391726][ T3742] usb 7-1: config 1 has no interface number 1 [ 240.399097][ T3742] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 240.422914][ T3743] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 240.430420][ T3743] usb 8-1: config 1 has no interface number 1 [ 240.435748][ T3743] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 240.602075][ T3742] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.609374][ T3742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.615210][ T3742] usb 7-1: Product: syz [ 240.619582][ T3742] usb 7-1: Manufacturer: syz [ 240.623866][ T3742] usb 7-1: SerialNumber: syz [ 240.642147][ T3743] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.649903][ T3743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.658840][ T3743] usb 8-1: Product: syz [ 240.662455][ T3743] usb 8-1: Manufacturer: syz [ 240.666229][ T3743] usb 8-1: SerialNumber: syz [ 240.942609][ T3742] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 240.950002][ T3742] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 240.989522][ T3742] usb 7-1: USB disconnect, device number 7 [ 241.062190][ T3743] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 241.067446][ T3743] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 241.097549][ T3743] usb 8-1: USB disconnect, device number 5 [ 241.137783][ T4158] udevd[4158]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.140411][ T4222] udevd[4222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 10:15:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000640)=0x7fff, 0x4) [ 241.606516][ T39] audit: type=1400 audit(1661595303.369:174): avc: denied { setopt } for pid=4600 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 10:15:03 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x000000000000']) 10:15:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) r5 = syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) syz_usb_disconnect(r5) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001780)=0x5) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000001800)=""/183) 10:15:03 executing program 1: write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) 10:15:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) r5 = syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) syz_usb_disconnect(r5) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001780)=0x5) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000001800)=""/183) 10:15:03 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$char_usb(r0, 0x0, 0x0) [ 241.659369][ T4609] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 10:15:03 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 10:15:03 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) write$char_usb(r0, &(0x7f0000000200)='_', 0x1) 10:15:03 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x000000000000']) [ 241.771551][ T4620] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 241.991999][ T3743] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 242.000766][ T171] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 242.262105][ T3743] usb 8-1: Using ep0 maxpacket: 16 [ 242.266534][ T171] usb 7-1: Using ep0 maxpacket: 16 [ 242.462390][ T3743] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 242.468352][ T171] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 242.474318][ T3743] usb 8-1: config 1 has no interface number 1 [ 242.478849][ T171] usb 7-1: config 1 has no interface number 1 [ 242.483374][ T3743] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 242.491774][ T171] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 242.652402][ T3743] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.659645][ T3743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.665608][ T171] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.672333][ T171] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.678780][ T171] usb 7-1: Product: syz [ 242.681741][ T171] usb 7-1: Manufacturer: syz [ 242.685535][ T3743] usb 8-1: Product: syz [ 242.688354][ T3743] usb 8-1: Manufacturer: syz [ 242.691634][ T3743] usb 8-1: SerialNumber: syz [ 242.695279][ T171] usb 7-1: SerialNumber: syz [ 243.012163][ T171] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 243.020875][ T171] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 243.053802][ T171] usb 7-1: USB disconnect, device number 8 [ 243.122194][ T3743] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 243.128650][ T3743] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 243.174538][ T3743] usb 8-1: USB disconnect, device number 6 [ 243.204371][ T4222] udevd[4222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 243.205700][ T4622] udevd[4622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.695789][ T4625] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 10:15:05 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) write$char_usb(r0, 0x0, 0x0) 10:15:05 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x0000000000000']) 10:15:05 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) r5 = syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) syz_usb_disconnect(r5) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001780)=0x5) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000001800)=""/183) 10:15:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) r5 = syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) syz_usb_disconnect(r5) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001780)=0x5) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000001800)=""/183) 10:15:05 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 10:15:05 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 10:15:05 executing program 1: syz_usb_connect$uac1(0x2, 0x8a, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "94e244388a"}, @selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 10:15:05 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x0000000000000']) [ 244.052645][ T48] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 244.062038][ T40] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 244.164082][ T4640] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 244.302449][ T48] usb 8-1: Using ep0 maxpacket: 16 [ 244.352407][ T40] usb 7-1: Using ep0 maxpacket: 16 [ 244.422066][ T3742] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 244.542096][ T48] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 244.549872][ T48] usb 8-1: config 1 has no interface number 1 [ 244.555643][ T48] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 244.572385][ T40] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 244.580027][ T40] usb 7-1: config 1 has no interface number 1 [ 244.585294][ T40] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 244.722236][ T48] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.728494][ T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.734824][ T48] usb 8-1: Product: syz [ 244.738685][ T48] usb 8-1: Manufacturer: syz [ 244.741654][ T48] usb 8-1: SerialNumber: syz [ 244.772260][ T40] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.778426][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.784907][ T40] usb 7-1: Product: syz [ 244.787837][ T40] usb 7-1: Manufacturer: syz [ 244.791163][ T40] usb 7-1: SerialNumber: syz [ 244.822405][ T3742] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 244.828042][ T3742] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.838256][ T3742] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.004610][ T3742] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.012256][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.018538][ T3742] usb 6-1: Product: syz [ 245.021444][ T3742] usb 6-1: Manufacturer: syz [ 245.024698][ T3742] usb 6-1: SerialNumber: syz [ 245.072253][ T48] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 245.078754][ T48] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 245.115938][ T48] usb 8-1: USB disconnect, device number 7 [ 245.204155][ T40] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 245.210336][ T40] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 245.241441][ T40] usb 7-1: USB disconnect, device number 9 [ 245.362488][ T3742] usb 6-1: 0:2 : does not exist [ 245.378611][ T3742] usb 6-1: USB disconnect, device number 6 [ 245.810954][ T4646] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 10:15:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) r5 = syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) syz_usb_disconnect(r5) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001780)=0x5) 10:15:07 executing program 1: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x420000, 0x0) 10:15:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1804}, 0x48) 10:15:07 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='resize=0x0000000000000']) 10:15:07 executing program 3: ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000001540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 10:15:07 executing program 1: syz_open_dev$vcsa(&(0x7f0000000380), 0x0, 0x24040) 10:15:07 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095ab4dcbdf0090426e6f81d4a2e1afbcc8bbb43cac869458d190dc5378f0af40c9660dc8a92f788b57480523f1add3757fdc6bbde438666c67a88e1be4de9970477ebfc77ee338032ace861e58accab65f8ef4a916c468e1589ff17c0597511ce4a7f20930ecb0daa3a53457400a4c37da1b4641edaa0f8d3f9ae9ad82c14c9dfe4fab75d4d25acff6b16ccb9e49933090efff525bbc0195999c8e65f3e4b55b3afa"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 10:15:07 executing program 0: io_setup(0x20, &(0x7f0000000040)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0xe3d2}]) [ 246.065794][ T39] audit: type=1400 audit(1661595307.829:175): avc: denied { read } for pid=4661 comm="syz-executor.0" path="socket:[33419]" dev="sockfs" ino=33419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.152300][ T3742] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 246.162065][ T3743] usb 7-1: new high-speed USB device number 10 using dummy_hcd 10:15:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0xffffff7f) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 10:15:07 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000200)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 246.240750][ T39] audit: type=1400 audit(1661595307.999:176): avc: denied { map } for pid=4664 comm="syz-executor.0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 246.257776][ T39] audit: type=1400 audit(1661595308.009:177): avc: denied { read write } for pid=4664 comm="syz-executor.0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 246.412011][ T3742] usb 8-1: Using ep0 maxpacket: 16 [ 246.532126][ T3743] usb 7-1: Using ep0 maxpacket: 16 [ 246.532392][ T3742] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 246.546913][ T3742] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 246.555448][ T3742] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.742218][ T3742] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.748122][ T3742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.754396][ T3742] usb 8-1: Product: syz [ 246.757045][ T3742] usb 8-1: Manufacturer: syz [ 246.760686][ T3742] usb 8-1: SerialNumber: syz [ 246.762511][ T3743] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 246.771687][ T3743] usb 7-1: config 1 has no interface number 1 [ 246.777496][ T3743] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 246.943832][ T3743] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.951288][ T3743] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.959829][ T3743] usb 7-1: Product: syz [ 246.963890][ T3743] usb 7-1: Manufacturer: syz [ 246.967756][ T3743] usb 7-1: SerialNumber: syz [ 247.112231][ T3742] usb 8-1: 0:2 : does not exist [ 247.132056][ T3742] usb 8-1: USB disconnect, device number 8 [ 247.302300][ T3743] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 247.307209][ T3743] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 247.329825][ T3743] usb 7-1: USB disconnect, device number 10 10:15:09 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000082505a1a4400001020301090270000119cc10000904000103"], &(0x7f0000000780)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}}) 10:15:09 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) 10:15:09 executing program 3: io_setup(0x403, &(0x7f0000000400)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000340)=[{}, {}], &(0x7f0000000380)={0x0, 0x3938700}, 0x0) 10:15:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) r5 = syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) syz_usb_disconnect(r5) 10:15:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) 10:15:09 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 10:15:09 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, 0x0) [ 248.045876][ T39] audit: type=1400 audit(1661595309.809:178): avc: denied { create } for pid=4683 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 10:15:09 executing program 0: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[{&(0x7f0000000400)="96", 0x1, 0x4}], 0x0, 0x0) [ 248.062166][ T39] audit: type=1400 audit(1661595309.809:179): avc: denied { ioctl } for pid=4683 comm="syz-executor.0" path="socket:[35954]" dev="sockfs" ino=35954 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 10:15:09 executing program 0: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[{&(0x7f0000000400)="96", 0x1, 0x4}], 0x0, 0x0) [ 248.252577][ T171] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 248.332372][ T3742] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 248.502040][ T171] usb 6-1: Using ep0 maxpacket: 8 [ 248.572249][ T3742] usb 7-1: Using ep0 maxpacket: 16 [ 248.732394][ T171] usb 6-1: config 25 has an invalid descriptor of length 0, skipping remainder of the config [ 248.743049][ T171] usb 6-1: config 25 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.751356][ T171] usb 6-1: config 25 interface 0 has no altsetting 0 [ 248.782084][ T3742] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 248.788386][ T3742] usb 7-1: config 1 has no interface number 1 [ 248.793561][ T3742] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 248.912270][ T171] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.918243][ T171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.924665][ T171] usb 6-1: Product: syz [ 248.928648][ T171] usb 6-1: Manufacturer: syz [ 248.933702][ T171] usb 6-1: SerialNumber: syz [ 248.972884][ T3742] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.979099][ T3742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.984828][ T3742] usb 7-1: Product: syz [ 248.987587][ T3742] usb 7-1: Manufacturer: syz [ 248.990825][ T3742] usb 7-1: SerialNumber: syz [ 249.225029][ T171] usb 6-1: USB disconnect, device number 7 [ 249.352346][ T3742] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 249.358493][ T3742] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 249.394432][ T3742] usb 7-1: USB disconnect, device number 11 [ 249.437014][ T4622] udevd[4622]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 10:15:11 executing program 0: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[{&(0x7f0000000400)="96", 0x1, 0x4}], 0x0, 0x0) 10:15:11 executing program 3: syz_usb_connect$uac1(0x0, 0x88, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xa, 0x24, 0x7, 0x2, 0x0, 0xf8, "94e244"}, @selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 10:15:11 executing program 1: add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="8c", 0x1, 0xfffffffffffffffc) 10:15:11 executing program 0: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[{&(0x7f0000000400)="96", 0x1, 0x4}], 0x0, 0x0) [ 250.088100][ T39] audit: type=1400 audit(1661595311.849:180): avc: denied { write } for pid=4692 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 10:15:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) 10:15:11 executing program 1: pselect6(0x0, 0x0, &(0x7f0000000280)={0x0, 0x9, 0x9, 0x200, 0x10001, 0x0, 0x4, 0x80}, &(0x7f00000002c0)={0xfffffffffffffc6a}, 0x0, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000580)={0x6, 0xbc8, 0x8, 0x6e7dd06f, 0xba5, 0x5}) syz_clone(0x60084080, &(0x7f00000003c0)="6f709d3089f20de844b3e8ccdd20506178cc542af14725f992be8df3e528fedc19c06dea4bda353c685ec53e670714c4e8358b82f747ecc8d4a48ef578d9a6763c065543c91e9828f4b70b0141a37e32323501c88a5232e998fc782474f6aa0c4487df039228498d7fe679716427898177e5cd19594e8a6282", 0x79, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="9b067580a2ab3153bda6a4c5c96de8be4ad4be52ac9672c92bb0c05a27ce9c382a06bfa51f41fd4eb0fac1135ba16085a2fdc1990f016955f374eaba80850d02d291a3db3d20b948ac9f30b71cf3a1b52ea1c07652abb6db04d2af07d98108041cdda5531b752e6ca2d5f1506b037b300ee677be51f28f5bc4d641aeff104e8f01378001256ca0c1504080e78940ee8d8fb7e8d2b0b81347") [ 250.372000][ T3742] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 250.444596][ T48] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 250.612947][ T3742] usb 8-1: Using ep0 maxpacket: 8 [ 250.692412][ T48] usb 7-1: Using ep0 maxpacket: 16 [ 250.732445][ T3742] usb 8-1: config 1 has an invalid interface descriptor of length 4, skipping [ 250.738730][ T3742] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 250.744530][ T3742] usb 8-1: config 1 has no interface number 1 [ 250.748616][ T3742] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.758047][ T3742] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.902365][ T48] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 250.911172][ T48] usb 7-1: config 1 has no interface number 1 [ 250.926352][ T48] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 250.966042][ T3742] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.975783][ T3742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.989482][ T3742] usb 8-1: Product: syz [ 250.995237][ T3742] usb 8-1: Manufacturer: syz [ 250.999852][ T3742] usb 8-1: SerialNumber: syz 10:15:12 executing program 0: keyctl$KEYCTL_PKEY_VERIFY(0x12, 0x0, 0x0, 0x0, 0x0) 10:15:12 executing program 1: io_setup(0xfb3, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) io_setup(0x8000, &(0x7f0000000040)=0x0) io_destroy(r1) [ 251.102427][ T48] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.108858][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.114687][ T48] usb 7-1: Product: syz [ 251.118076][ T48] usb 7-1: Manufacturer: syz [ 251.132820][ T48] usb 7-1: SerialNumber: syz [ 251.392356][ T3742] usb 8-1: USB disconnect, device number 9 [ 251.482115][ T48] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 251.488826][ T48] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 251.536106][ T48] usb 7-1: USB disconnect, device number 12 [ 251.730108][ T4622] udevd[4622]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.730228][ T4222] udevd[4222]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 252.324170][ T39] audit: type=1400 audit(1661595314.089:181): avc: denied { read } for pid=4712 comm="syz-executor.3" name="rtc0" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 10:15:14 executing program 0: io_setup(0xad0, &(0x7f0000000040)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 10:15:14 executing program 1: io_setup(0xfb3, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) io_setup(0x8000, &(0x7f0000000040)=0x0) io_destroy(r1) 10:15:14 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0x14}) 10:15:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) [ 252.370859][ T39] audit: type=1400 audit(1661595314.109:182): avc: denied { open } for pid=4712 comm="syz-executor.3" path="/dev/rtc0" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 10:15:14 executing program 3: keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000), 0x0, 0x0, 0x0) [ 252.395797][ T39] audit: type=1400 audit(1661595314.109:183): avc: denied { ioctl } for pid=4712 comm="syz-executor.3" path="/dev/rtc0" dev="devtmpfs" ino=864 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 10:15:14 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x41000002, 0x0) [ 252.423960][ T39] audit: type=1400 audit(1661595314.129:184): avc: denied { write } for pid=4709 comm="syz-executor.0" path="socket:[35043]" dev="sockfs" ino=35043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 10:15:14 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x560000, 0x0) 10:15:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) 10:15:14 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) 10:15:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) 10:15:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) connect(r0, &(0x7f0000000040)=@generic={0x0, "2fc3d685195dbe65d8cef90202aee50f8893f4d3e016d5074adf56b5302d874881553d21fc8560a597240013dcd8337c58ae9f450fa2d9b4b8f7e3544f748dba5e4744172a986e667b74173ac1c926cc65d1db820d61031226556d9e154cef76453512791a852ad6f3538e67b2972aaaaa384a2aa3138e7f1a2215b4c99e"}, 0x80) 10:15:14 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000082505a1a4400001020301090270000119cc10000904000103020600300824060000f8f14005240004000d240f0106000000010001040708241c000201030005241502000724140104ffff1524123000a317a88b045e4f01a607c0ffcb7e392a09058103080040001209"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0xc7, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 10:15:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) [ 252.880059][ T39] audit: type=1400 audit(1661595314.639:185): avc: denied { connect } for pid=4731 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 253.182028][ T24] usb 5-1: new low-speed USB device number 3 using dummy_hcd 10:15:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) 10:15:14 executing program 3: io_setup(0x8db, &(0x7f0000000000)=0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0]) 10:15:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000001400)=""/55) [ 253.226227][ T39] audit: type=1400 audit(1661595314.989:186): avc: denied { getopt } for pid=4739 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 10:15:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) [ 253.259184][ T39] audit: type=1400 audit(1661595315.019:187): avc: denied { read } for pid=4745 comm="syz-executor.1" name="loop-control" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 253.289511][ T39] audit: type=1400 audit(1661595315.019:188): avc: denied { open } for pid=4745 comm="syz-executor.1" path="/dev/loop-control" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 10:15:15 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 253.321436][ T39] audit: type=1400 audit(1661595315.029:189): avc: denied { ioctl } for pid=4745 comm="syz-executor.1" path="/dev/loop-control" dev="devtmpfs" ino=654 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 10:15:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000001400)=""/55) [ 253.397195][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.418331][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:15:15 executing program 3: r0 = socket(0x2, 0x3, 0x1) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) [ 253.436510][ T4749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.662149][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 253.752509][ T24] usb 5-1: config 25 has an invalid descriptor of length 0, skipping remainder of the config [ 253.761398][ T24] usb 5-1: config 25 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 253.771750][ T24] usb 5-1: config 25 interface 0 has no altsetting 0 [ 254.662224][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.669968][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.994149][ T24] cdc_ether: probe of 5-1:25.0 failed with error -22 [ 255.000740][ T24] usb 5-1: USB disconnect, device number 3 10:15:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000640)={0x0, 0x0, 0x0}) 10:15:17 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000082505a1a4400001020301090270000119cc10000904000103020600300824060000f8f14005240004000d240f0106000000010001040708241c000201030005241502000724140104ffff1524123000a317a88b045e4f01a607c0ffcb7e392a09058103080040001209"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0xc7, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 10:15:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:17 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xd4fa3fe959b9ad8}, 0xff7f) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x100000, r2, 0x9}) 10:15:17 executing program 3: syz_genetlink_get_family_id$wireguard(&(0x7f0000000680), 0xffffffffffffffff) [ 255.462933][ T39] audit: type=1800 audit(1661595317.229:190): pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1159 res=0 errno=0 10:15:17 executing program 3: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904030011070103000905010200ffe000000905820264"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0xd7, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x8, 0xfe, 0x9d, 0x0, 0x69a, 0x320, 0xa5c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0xc8, 0xf8, 0x3, 0xf1, 0xed, 0x96, 0x4, [], [{{0x9, 0x5, 0xb, 0x3, 0x200, 0x3f, 0x40, 0x1}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x8, 0x7, 0xc0}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x8, 0x6, 0x7, [@generic={0x6d, 0x9, "20b530d725b90e001f4a6e986fe042085c8b89cef1aa5671e244dc77968b050194da9903305ec1a166915e91e2c42357c6a07ced697b769ae75c00eadb8b23160027b186c731fbda45d2d444dad7b14e8bc689d4106b5a8f05fd06af02fb3aa9bbf5c7bf2cab113fec4997"}]}}]}}, {{0x9, 0x4, 0x8a, 0x0, 0x3, 0xce, 0xb1, 0x6d, 0x6, [], [{{0x9, 0x5, 0xb, 0x1a, 0xb86196d3b64c048b, 0x39, 0xbc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3b, 0x45}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xf8}}, {}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x300, 0x1f, 0x6, 0x2, 0xff, 0x4}, 0x8b, &(0x7f0000000a40)={0x5, 0xf, 0x8b, 0x1, [@generic={0x86, 0x10, 0x4, "ceb66d5a1fc8f6b9e785f1fdf0aacd2db5d5e2271b10876c74874c2cbbdfce0e070cc0627a4266ee43d41aa2aa18898df5df673b93508532bc5fef81ea3edc3ffade7e462a0260a7600b9d8f8290e27eba3e78bfc2f6d28234e51dd8cbe4cf5e2fc0bb65c5a4c89794ff7039268dc2cca62001026e6edd3ddd14edcffecea115eaa8ef"}]}, 0x2, [{0x7, &(0x7f0000000b00)=@string={0x7, 0x3, "581c7140ef"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x407}}]}) [ 255.478651][ T39] audit: type=1800 audit(1661595317.229:191): pid=4762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1159 res=0 errno=0 10:15:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:17 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xd4fa3fe959b9ad8}, 0xff7f) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x100000, r2, 0x9}) [ 255.554511][ T39] audit: type=1800 audit(1661595317.319:192): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1159 res=0 errno=0 [ 255.574973][ T39] audit: type=1800 audit(1661595317.329:193): pid=4771 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1159 res=0 errno=0 10:15:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:17 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xd4fa3fe959b9ad8}, 0xff7f) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x100000, r2, 0x9}) [ 255.678941][ T39] audit: type=1800 audit(1661595317.439:194): pid=4776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1159 res=0 errno=0 [ 255.694250][ T39] audit: type=1800 audit(1661595317.439:195): pid=4776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1159 res=0 errno=0 [ 255.712058][ T15] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 255.772324][ T171] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 256.012101][ T171] usb 8-1: Using ep0 maxpacket: 8 [ 256.112318][ T15] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.132231][ T171] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 256.138052][ T171] usb 8-1: config 250 has an invalid interface number: 3 but max is -1 [ 256.144567][ T171] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 256.151099][ T171] usb 8-1: config 250 has no interface number 0 [ 256.156045][ T171] usb 8-1: config 250 interface 3 altsetting 0 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 256.163967][ T171] usb 8-1: config 250 interface 3 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 256.171394][ T171] usb 8-1: config 250 interface 3 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 100 [ 256.178838][ T171] usb 8-1: config 250 interface 3 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 256.212232][ T15] usb 5-1: config 25 has an invalid descriptor of length 0, skipping remainder of the config [ 256.218732][ T15] usb 5-1: config 25 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 256.228233][ T15] usb 5-1: config 25 interface 0 has no altsetting 0 [ 256.302087][ T171] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 256.308025][ T171] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 256.313550][ T171] usb 8-1: Product: syz [ 256.316320][ T171] usb 8-1: SerialNumber: syz [ 256.363329][ T171] hub 8-1:250.3: bad descriptor, ignoring hub [ 256.368459][ T171] hub: probe of 8-1:250.3 failed with error -5 [ 256.576098][ T1350] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.581163][ T1350] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.583749][ T171] usblp 8-1:250.3: usblp0: USB Bidirectional printer dev 10 if 3 alt 0 proto 3 vid 0x0525 pid 0xD292 [ 256.622287][ T171] usb 8-1: USB disconnect, device number 10 [ 256.633442][ T171] usblp0: removed [ 257.142227][ T15] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.150437][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.156112][ T171] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 257.392150][ T171] usb 8-1: Using ep0 maxpacket: 8 [ 257.512867][ T15] cdc_ether: probe of 5-1:25.0 failed with error -22 [ 257.522805][ T15] usb 5-1: USB disconnect, device number 4 [ 257.534527][ T171] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 257.540725][ T171] usb 8-1: config 250 has an invalid interface number: 3 but max is -1 [ 257.546983][ T171] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 257.556008][ T171] usb 8-1: config 250 has no interface number 0 [ 257.561734][ T171] usb 8-1: config 250 interface 3 altsetting 0 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 257.580425][ T171] usb 8-1: config 250 interface 3 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 257.589172][ T171] usb 8-1: config 250 interface 3 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 100 [ 257.597093][ T171] usb 8-1: config 250 interface 3 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 257.732302][ T171] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 257.739166][ T171] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 257.746171][ T171] usb 8-1: Product: syz [ 257.749166][ T171] usb 8-1: SerialNumber: syz [ 257.793475][ T171] hub 8-1:250.3: bad descriptor, ignoring hub [ 257.797891][ T171] hub: probe of 8-1:250.3 failed with error -5 10:15:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:19 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xd4fa3fe959b9ad8}, 0xff7f) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x100000, r2, 0x9}) 10:15:19 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000082505a1a4400001020301090270000119cc10000904000103020600300824060000f8f14005240004000d240f0106000000010001040708241c000201030005241502000724140104ffff1524123000a317a88b045e4f01a607c0ffcb7e392a09058103080040001209"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0xc7, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 258.015451][ T171] usblp 8-1:250.3: usblp0: USB Bidirectional printer dev 11 if 3 alt 0 proto 3 vid 0x0525 pid 0xD292 [ 258.063495][ T171] usb 8-1: USB disconnect, device number 11 [ 258.070503][ T171] usblp0: removed [ 258.293061][ T48] usb 5-1: new low-speed USB device number 5 using dummy_hcd 10:15:20 executing program 3: fsopen(&(0x7f0000000240)='nsfs\x00', 0x0) 10:15:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:20 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='\'\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) 10:15:20 executing program 1: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000200)) socket$inet(0x2, 0x4000000000000001, 0x0) close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0x0) [ 258.543610][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 258.543623][ T39] audit: type=1400 audit(1661595320.309:198): avc: denied { wake_alarm } for pid=4792 comm="syz-executor.1" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 10:15:20 executing program 1: syz_clone(0x60084080, &(0x7f00000003c0)="6f709d3089f20de844b3e8ccdd20506178cc542af14725f992be8df3e528fedc19c06dea4bda353c685ec53e670714c4e8358b82f747ecc8d4a48ef578d9a6763c065543c91e9828f4b70b0141a37e32323501c88a5232e998fc782474f6aa0c4487df039228498d7fe679716427898177e5cd19594e", 0x76, &(0x7f0000000440), 0x0, &(0x7f00000004c0)="9b067580a2ab3153bda6a4c5c96de8be4ad4be52ac9672c92bb0c05a27ce9c382a06bfa51f41fd4eb0fac1135ba16085a2fdc1990f016955f374eaba80850d02d291a3db3d20b948ac9f30b71cf3a1b52ea1c07652abb6db04d2af07d98108041cdda5531b752e6ca2d5f1506b037b300ee677be51f28f5bc4d641aeff104e8f01378001256ca0c1504080e78940ee8d8fb7e8d2b0b813") 10:15:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:20 executing program 3: syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x12042) [ 258.732447][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.832641][ T48] usb 5-1: config 25 has an invalid descriptor of length 0, skipping remainder of the config [ 258.841236][ T48] usb 5-1: config 25 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 258.864172][ T48] usb 5-1: config 25 interface 0 has no altsetting 0 [ 259.802665][ T48] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.809050][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.153811][ T48] cdc_ether: probe of 5-1:25.0 failed with error -22 [ 260.196521][ T48] usb 5-1: USB disconnect, device number 5 10:15:22 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x174) 10:15:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:22 executing program 0: syz_usb_connect$cdc_ecm(0x1, 0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000082505a1a4400001020301090270000119cc10000904000103020600300824060000f8f14005240004000d240f0106000000010001040708241c000201030005241502000724140104ffff1524123000a317a88b045e4f01a607c0ffcb7e392a09058103080040001209"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0xc7, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 10:15:22 executing program 1: syz_clone(0x60084080, &(0x7f00000003c0)="6f709d3089f20de844b3e8ccdd20506178cc542af14725f992be8df3e528fedc19c06dea4bda353c685ec53e670714c4e8358b82f747ecc8d4a48ef578d9a6763c065543c91e9828f4b70b0141a37e32323501c88a5232e998fc782474f6aa0c4487df039228498d7fe679716427898177e5cd19594e", 0x76, &(0x7f0000000440), 0x0, &(0x7f00000004c0)="9b067580a2ab3153bda6a4c5c96de8be4ad4be52ac9672c92bb0c05a27ce9c382a06bfa51f41fd4eb0fac1135ba16085a2fdc1990f016955f374eaba80850d02d291a3db3d20b948ac9f30b71cf3a1b52ea1c07652abb6db04d2af07d98108041cdda5531b752e6ca2d5f1506b037b300ee677be51f28f5bc4d641aeff104e8f01378001256ca0c1504080e78940ee8d8fb7e8d2b0b813") 10:15:22 executing program 3: r0 = fsopen(&(0x7f0000000440)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 261.072347][ T15] usb 5-1: new low-speed USB device number 6 using dummy_hcd 10:15:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) [ 261.131815][ T39] audit: type=1400 audit(1661595322.889:199): avc: denied { create } for pid=4820 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 261.162633][ T39] audit: type=1400 audit(1661595322.919:200): avc: denied { getopt } for pid=4820 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 10:15:22 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='&-\x00', &(0x7f0000000080)='e', 0x1) 10:15:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:22 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000100)=0x78) [ 261.505231][ T15] usb 5-1: unable to get BOS descriptor or descriptor too short 10:15:23 executing program 3: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001480)=[{&(0x7f0000000340)="c4", 0x1, 0xd6d}], 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB]) [ 261.626766][ T15] usb 5-1: config 25 has an invalid descriptor of length 0, skipping remainder of the config [ 261.638070][ T4825] loop3: detected capacity change from 0 to 13 [ 261.663800][ T15] usb 5-1: config 25 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 261.683279][ T15] usb 5-1: config 25 interface 0 has no altsetting 0 [ 261.689271][ T4825] Dev loop3: unable to read RDB block 13 [ 261.697577][ T4825] loop3: unable to read partition table [ 261.704454][ T4825] loop3: partition table beyond EOD, truncated [ 261.717704][ T4825] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 262.682154][ T15] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.689074][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.046284][ T15] cdc_ether: probe of 5-1:25.0 failed with error -22 [ 263.054596][ T15] usb 5-1: USB disconnect, device number 6 10:15:25 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x14e1, 0x6000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0xb, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 10:15:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:25 executing program 3: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001480)=[{&(0x7f0000000340)="c4", 0x1, 0xd6d}], 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB]) [ 263.484959][ T4830] loop3: detected capacity change from 0 to 13 [ 263.499226][ T4830] Dev loop3: unable to read RDB block 13 [ 263.510559][ T4830] loop3: unable to read partition table 10:15:25 executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000001480)=[{&(0x7f0000000140)="d47ce58601aa62f81fa2ae2dd3a4d76ef6eab0b60e4af9a01a9bfa01c5", 0x1d, 0x7ff}, {0x0, 0x0, 0x1}, {&(0x7f0000000340)}, {0x0, 0x0, 0xf5}, {&(0x7f00000003c0)="d5b957eedbad95ccdd1d3c147ffbfbb44c078f4ea743fecd79224cb6ce102f86502feb70668659c6507631543895600ebac91062c3fd54db32c894b3b61622ce0f02ea8ffb3cab1c58d075378341a52f1709be7da243e5210e014ea83e9865e3fcea3438750ac33c6e95bacfe36e987aaf3d44e9951c23266991f84183896cdd51d88327f2200b6b9fa042f2742386355e1a4450199f3eb4b7b0555d8e4c2f95015204c4e7ef61b37fa8870ee4b6ba0d64b7380b1f6f34ff029b659fed8e0b599078d2f7a29d4acbb5355ab163645f287d707c9975de88d80645abebb1ee793bc61a89e17579b33174f46f56b6a11b814cd4f9f9e742d977b9bb9b275d106706eaa4334411fa0a94646f4b08dc93395db90b4f4dee25c6877d507944e0216f8146916718d3f8020ab1ae9348db609dde9e1c8f663779698170a6dff473625996d4a6c0d13c96bdc588e41e489c8a78e544f5c37f2b8aaf387caf91c9ba61577edf8b644abb6b65803a40075fc85e0166fcc543d233b9c45ae1aa27b8fe2064bd85b24b9f64447a0f699f691398c069b87f8103940f31d5cc9dcadea8a299600c7efe95f6927d96338de22131c272b65b4f1db0ca744e8a456e2099ceff25625141a11ba895b6af0cb43be7124007d78683cbe2b6ef80da69c49239c7a53c90e01a73572c0d551953a763299522274d1d12b75ca1d4320eac02758d2c70a86ad8b7924a9192573a8980e69ac8fb8de89e28b578db1a9ae2b4c628da493ffbabcb300245a6847acc7041ab5c446ebd91047f997aa10388fa687fa5834777e051310615cddd195e4968decdef9687ceb656b39fab96722fa47311ab4a050e487a4e9e9be49e2cc1578c55b9c311c4b615a3866eda0c8eb939dfa387f6d66ff7e55296e835aa598d7f14d012fe604e5e2f1e8696140f9db81facd7fe521f2aba8e78ba6911ffd1bb4e2e9d120261e947c877153c7c373a789ea434db8b5fc92756b345845525d4388af9db29ef7c3c97a0128e858bb1c5b9dc199dad7d6b9cace5295e07f3d5d6fbeb7a0a0685adeb2b71effb5ec370cc4c09d003fcc1b7e251bd4f6f177c439136e58d548a8371e32ab6ce90ef9e6901c6573d25e586885706e67817faad1b78646698e921d93dae9f24293bac9bba840c53d3b6ed960e33e8f9571f087af01bb7b96e5ceefb39e992619e06000eb51ff2d603237af54da6efd5a1fbe7e3bd907dc409e25db3269947a53459ede9d3c3f348d4dccffea43234375b34ed87ad0590c4ea8e37cfd2370dd5846e254f6d24c20ef0bbb00772c3a8f403c5466851a65a7ea891f647efaaa29fd26e7ee93d8980f3cadd2edcbdc240c6a8037a8738a3a0f8d8e43c3b53becb8e5279895789df99936ba303e2ed9ca05426c4da25f0f53fc845b807c0152b056464ab619b0207acc88844e9ae27474c37efed905555ee627f97b3252e832999ac0c6c1fe1f1921c7b53aded588397467bf770ab98341fb0d20c790cf8c68f2f8c6a43fab09d9b53ce2a2a22e87f793e803e9c93d9a90f9e5ffb36df82b83680050b0f7caa4e222963bce3ea1b6be2536b19305092a00d5a7c56eabe43f0da8f8efd5773c2fd5873318b31bca6f2224513d5369e946d4e8f648a7f39146c62c439b7f4af8f8b36fff84490117f46b2883fdc993b0368cc6d2aedbdab478e4079fea8a271ddda814bce8f53dbfb553824f13e6e531c16fee10d4983a140a173d8e44c16dd8616f1dd7f9c5fdb12ab4ba31d243bae33b0165fae637ea263304bccbfdabcd9eac3a915ec9f440a26ebd0ba7e1fcebc606dbe55da659b474a976f0fc44d2c69c88fcd8c07b4733f84f8ab7f4cf290c245b5291d15577c9d6a951a38580a7dfb5c5dedfcc970baf67794737558ea7137d0879887cdd930b0d0d4abea2d7b9c6003a6f5196e63f8f7966409f3d075238bbf3c8507b6b846675cfe969822fb09cfb993676498a13c70469af6c008a5f7048f3b62be0b1aad0bfa5492476e4e82d258197aa2631a77164747545b1c58c06f9faa42ef6e55338b4b68d9132646dda7f1235ba3704e68b3f8ee7e151bf98f852e6d584654b0ed0702959ddd594a2c5826e00947b5ea19824572d5ab33183a9e8b8ca6b6c80ed32fad4ab921288b4a8a1c5873254f6914861526d840cf8421252a901e27bd7d968bfad08e6f8dec9db7f9eaedb220b79478040dd836b7c7c7b4a16b2fc665ecf0ae9242c339d2c67be74b254fbc89b95b5e8a07356f5e1ce4a3eb529db64281777b0ca29ad7d9044c0c3ad733601012c2dfd81720e3da1b0cf2b6f10875b02288277bc0feb6ff3d94047c5258015a64a69eeaf344119092a7a103d943397112ae3536d6c9832b4ca0a8a22b8f31e8363c958a739312850be15b7b68b8da9d99faface7dc85a672bd46bbec2d4a6ab523f4ef72dbc442d57966f48fe7ed7f95a0cab", 0x6ca, 0x4508}, {&(0x7f00000013c0), 0x0, 0x3}, {0x0}, {0x0}], 0x801004, &(0x7f0000001580)=ANY=[@ANYBLOB='u', @ANYRESHEX=0xee01]) [ 263.516171][ T4830] loop3: partition table beyond EOD, truncated [ 263.522771][ T4830] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 263.526476][ T4833] loop0: detected capacity change from 0 to 69 10:15:25 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:25 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) fcntl$getown(r0, 0x4) 10:15:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x1e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) [ 263.597333][ T39] audit: type=1400 audit(1661595325.359:201): avc: denied { create } for pid=4837 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 10:15:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x3, 0x3, 0x5}, 0x14}}, 0x0) [ 263.782075][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 264.022006][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 264.144120][ T24] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 264.302374][ T24] usb 6-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.40 [ 264.311784][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.321729][ T24] usb 6-1: Product: syz [ 264.325555][ T24] usb 6-1: Manufacturer: syz [ 264.328694][ T24] usb 6-1: SerialNumber: syz [ 264.584543][ T15] usb 6-1: USB disconnect, device number 8 10:15:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdrdstopts={{0x18}}, @tclass={{0x14}}], 0x30}}], 0x1, 0x0) 10:15:26 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 10:15:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x1) 10:15:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) [ 265.110113][ T39] audit: type=1400 audit(1661595326.869:202): avc: denied { create } for pid=4845 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 265.126886][ T39] audit: type=1400 audit(1661595326.869:203): avc: denied { getopt } for pid=4845 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 10:15:26 executing program 0: r0 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) 10:15:26 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x0, 0x0, 0x5, 0x0, 0x2, 0x200}) 10:15:26 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs$namespace(0x0, 0x0) 10:15:26 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r0, &(0x7f00000006c0), &(0x7f0000000700)=0xc) 10:15:26 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x3e}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) [ 265.172126][ T39] audit: type=1400 audit(1661595326.919:204): avc: denied { ioctl } for pid=4853 comm="syz-executor.1" path="socket:[36106]" dev="sockfs" ino=36106 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 265.210965][ T39] audit: type=1400 audit(1661595326.969:205): avc: denied { create } for pid=4859 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 10:15:27 executing program 3: syz_open_dev$dri(&(0x7f0000000280), 0xc4, 0x92a40) 10:15:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:27 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) [ 265.517439][ T15] usb 6-1: new high-speed USB device number 9 using dummy_hcd 10:15:27 executing program 3: syz_mount_image$v7(0x0, 0x0, 0x0, 0x1, &(0x7f0000001740)=[{0x0}], 0x0, 0x0) 10:15:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {0x3}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 10:15:27 executing program 3: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) write$damon_target_ids(r0, 0x0, 0x0) [ 265.806537][ T15] usb 6-1: Using ep0 maxpacket: 16 [ 265.945198][ T15] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.967224][ T15] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.992420][ T15] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.019900][ T15] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 266.037088][ T15] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 266.047532][ T15] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 266.222171][ T15] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.230045][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.239148][ T15] usb 6-1: Product: syz [ 266.242517][ T15] usb 6-1: Manufacturer: syz [ 266.260905][ T15] usb 6-1: SerialNumber: syz [ 266.515448][ T4862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.535536][ T4862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.572431][ T15] cdc_ncm 6-1:1.0: bind() failure [ 266.588581][ T15] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 266.597380][ T15] cdc_ncm 6-1:1.1: bind() failure [ 266.604058][ T15] usb 6-1: USB disconnect, device number 9 10:15:29 executing program 0: r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x48084, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x6e) 10:15:29 executing program 2: syz_open_dev$evdev(0x0, 0xc1, 0x400) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:29 executing program 3: syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000000), 0x0, &(0x7f0000000000)={[{@errors_continue}]}) 10:15:29 executing program 1: syz_mount_image$v7(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)) syz_mount_image$iso9660(&(0x7f0000001840), &(0x7f0000001880)='./file0\x00', 0x7fffffffffffffff, 0x1, &(0x7f0000001a80)=[{&(0x7f00000018c0)='+', 0x1}], 0x0, &(0x7f0000001b00)) [ 267.314439][ T4884] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 267.317044][ T4885] JFS: c is an invalid error handler [ 267.337500][ T4886] loop1: detected capacity change from 0 to 264192 10:15:29 executing program 0: syz_emit_ethernet(0x103, &(0x7f0000000000)=ANY=[], 0x0) [ 267.421660][ T4886] ISOFS: Unable to identify CD-ROM format. 10:15:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000010c0)={&(0x7f0000000080), 0xcc, &(0x7f0000001080)={&(0x7f0000002940)={0xf54, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xa0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x0, 0x12, 0x0, 0x1, [@NL80211_ATTR_BSSID, @NL80211_ATTR_SCAN_SSIDS={0x0, 0x2d, 0x0, 0x1, [{0x0, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x0, 0x77, 0x6}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x84, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x4f}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x0, 0x0, 0xff}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x50, 0xb, "8f5e996a443c6946fb7b9660612813b1eebbc54bd8392d1f6aa87bd469545fe3e369c7338f4166852a31a7b564920ffd994f807842ab28533b293118e0031593d9ce12da729c57a871d9ac3f"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @loopback}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x9d8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x928, 0x4, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xe6, 0x1, "7567f1bbfaa85786f3e36da49d3c7833b81d0091fdbac91d207d12e7a51e81181a98e6f313c9916cded2673fd6aa8885ba14e319fc2f88c7aa3199e3940f043876d54c4e64c1b5e89611c5f1b403adf6e3c6f4670ac20f75f0a26b57123cea82b781d42db071774593354d8fb7b9c735b84568c896ca3b31451ae8d02c6cb1105b4b7e35ebd75de4f0eae70cd9ca783878bf7f9c05bf919c8da17e7c54e89481e2ad4769be93e08aff048633a12aa317362487c2460ca566f18ab6541b1a673eb0a0e9a7d3afa2ff7a1fd8e035d4a607e00db0cba51d719e34bacd3279491b678834"}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x41, 0x2, "decac08dec5e89053ac924465f96136f0b47f59bc8c974edd8d0d00bb123e8d75c238c892ef4776085d512fece1e965ab8616be7de1ebae31a3270e7a2"}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0xf1, 0x1, "46013b2461e01890c4da47cc66b224f178c9cf4e6be473c1765277aea204d6279e227079331a46a48d4824985508b44941dae6cf29e0dee14abcb04a1af168332cb6ee757623720658779ac8beecdb3be0a975a106bb7b49dfe8f0024b84734d3457a16b77cdacb4dde1bfa8b5c5b84b3252dfd74b9eacc72f1cb949b0c4f820b2d12333f4c2122f030ab1ec6b410e51677c50276f8a0fbb5de97b127418347b0a0979f6367874c5b2c7e95d44ae1660a7ff499e9d5d48723c6255b2e9e81d32eb79eed77af535789c502d5c83eb721f5184f3ce102a974dbea10ff88df35ea324d841baee032a3b1826e577c4"}, @NL80211_PKTPAT_MASK={0x20, 0x1, "5c3c1da6db85c73bafd6f6956473f8f5bacced23e182a5550fca179f"}, @NL80211_PKTPAT_PATTERN={0x85, 0x2, "2e29fb062bcb03c60f09aae45c3773eca85da679945309ab5ccdf3471b35571f529b5fbf252f17ab1f9a2028144226a5d369649c5ea0c946497a30de5e4fd20a8528aa7c2dc4e92c7fa1c3d1f16e67560a68712ca5dd570d0e94e93dd6c2f97db4b82e6b5fb6ed58263dfedf689f6f8f0565e280758582e07aff2965ccbaf36061"}, @NL80211_PKTPAT_MASK={0xea, 0x1, "d7429ff24251645d003a0347331d69181734a9d009ac87f64a1f0df5a7600e531bd78fa15fac857d3fc8005fa960e918f9f68e8424762f43f3945d74293c3ad42f338d729a705dd404e4d19e2dcb52db9daa64fdd7dea67334381e92c34c57e29e69f4a052585b5a3a06de34c7e35140e99f1bdbc3090c65c513e2beaa4b1a42e89be8ab42d82a102fa5bbb22afba32b889c21087902f3912c4d144485974f3624decdb496bf4ab5e23b1e64c3ddee085c12239e2104a5b3860bd330022b767be84237c0321a82b0b22215ec84c4fa2a9c51701a8da140da4cc9cbdfc4a454805be335320bad"}, @NL80211_PKTPAT_MASK={0x49, 0x1, "7790f70cf50d6f7fd9c638c94f6de7b09e30c09f7348ad2ce054423017d267cb9b251747d3b37d809bb8f36b187b83e22f241fb49c8b81de28aa18ffc4f6d3ead76708c319"}, @NL80211_PKTPAT_MASK={0x87, 0x1, "d11cec8f307c62aa99dcf116405647a9240506c3617edb28a5163d85f4efea97cc5e139f2e88a9dec7f3d1266f0650d4ddeca8fdd15aada99c90b5ca9b9f9cf7f9b883791a971c963a2907d20755b2e1865bfb8b7e0fd7a79e2e5bbb393036a73a3bc6f2795439f4301ee73f45e1babde29457882c6a6a0e134810bec0a0b21c87d389"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x59, 0x2, "d6583b409388d3ec026ced03dfdb1e1c184fc7c139a6fb5576c4142c83a96f447417adffdd29d77d4e40046f48af24186aa6a8a32b8f2e98931becdd9cb8d1840f3efa06e9ed798c8a2f264db53f7de3f95f0f44c6"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_PATTERN={0x7f, 0x2, "2cc23174beb4eaa496b37c253f498d5461ea56d2032a92ae13d681cf10a602e48a14dc1b7c0d103b0a8679294eb007c200e7b630c84653479806615bd34bf1c1f6fb9da22f1b8d471efcf99ea5316900c57320562947251937c2b8e3227b81348f30b88bf67d85f5d41bb96fb5bb49acd7d2bbcd55aa8d0bac1f0c"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0xb1, 0x1, "7d3db11118fc0d568db1bede887c4076651acd3aa1a37c8384836896a1f19b23dc7b3415c42d7d1ca99a8e4817bb7b505d5aae74576a56417997edf5dcc34ed2ddaade6d3c98f6e7aa6713e8f659ae04b54f2e4f9c38ce72e970e9d4af85bae24820aeaba60ce0d96fca2c02a7f38aab95378f04efb2e56c124060b154dc8dd70ff764806b04e1b85b0cc19dcf4199496f5ad5acc9625cfe80be326d4066a257d3c208fbd0504052dced45c573"}]}, {0x2cc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0xa9, 0x2, "5e817c7bcada348c0b15cfe4750d3a2d1a9997e24a69cbf6352351e96085251a118147f8e13d27aafbdadf1aee90e4eec31557b0bd3f415a69bfbf3bedc9246e086301f2eb67f8641a99188544f9235ddd6347d851ad10f6c5da07cc56fa1eb66a7e372222ec8329d87f1002776d498fc97f97b4644c6c68b8e29c14e2820bec99389ca0902f144ceb9802c4585febd797e39c6a7e20581fc971c10b3ee7831fadf62ce6c5"}, @NL80211_PKTPAT_MASK={0x0, 0x1, "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"}, @NL80211_PKTPAT_MASK={0xf6, 0x1, "571887c548bc5a89979dc61c1db3c3185d06679f824f3e1aac9954d494ad837a2eafad7b309f94bb27fa84c8c4678868e4de2ef3856c66b1c80ea2c99e31d2de94b0ba5a42d6ff00ccc0121e0006e370204658000377619817d4ba15de54b24bb7581e917b681c86f27c9b1407ed8ea195292969a026f1c6671cb6acf3f7f5a00cd00dc0bf5c7832af2ea24c992ea35abc0c957541b38ea9254aa660f375a7349636254d49d8de709dab0b714618647039155f8bea60a2f604c183f0f698945632cb0e1db9caa09244e7983ab112a030d0e6edea10a68bf285e89be622d00b4205ba2c31f9adcbf1da148269e004daec6cfc"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x37, 0x1, "23acdd55a2b0dd35b935092ba14cc1d8470135857ef79f01c80e081bbc7d779f8024c64862788afc9cade55b9370f38ab44786"}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x90, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x70, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffeff}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_5GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xf1}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x10, 0x12, 0x0, 0x1, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x108, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xd8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xbb, 0x8, {0x0, 0x0, "f0a8b3a2166282a993fe24ab61aa047584e5c5834b0503d7a3ba18fcfa80317577992968372f833539c679f9cb6b95101bea2f7e26038c82a4386c27c872a6047aa8f991803bbd0f18ee9126258f5daf946540a529e287f1ed70c7521a0d8ffc0dd3f1768c97f2507543db9b6cd8bff274f91a3df9c7342ad05c01e81dc4662b9e5242a68af192b4a54d487b08a2b38764492f4e6b07c8881bc031928b401f984ed99863cb08685e1a082ac49ebd0e"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10}, @NL80211_WOWLAN_TCP_DST_PORT={0x6}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x78, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xb0, 0x4, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xa0, 0x2, "e19d9021724f1210d2768029e93aeeca6f61761f1e430df495bd23113de030dc5fd605015b75eeb05e42c77ae882104dd5dc92cacbea5215df6f51ae28116c370e6f8e03f115a97280e1af6276b90ff05f57bc7ad764038770c669bc5c8e6bcbc6684fac36385a41dcbdb7589cdb8501d3a39ed2e5a51870395a78f14b384c6465cf4b72fc02ddf528813578fe04f9ee2422f09c26a9e208d6b074ae"}, @NL80211_PKTPAT_OFFSET={0x8}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x268, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x0, 0x1, @private}, @NL80211_WOWLAN_TCP_DST_MAC={0x0, 0x3, @broadcast}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x25c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xbe, 0xa, "f49e446fbca4873915f4c35290d91f57229705a7d6619cbb5aa364b70ad2bb04b4f0cf2e97f0f6ec90e4c6689d285efb4c746a3428214ad4c8cb167de9f58f25a1147554465fdd4786afa9a7ef84207bf647c4a90f3625edf70ca253b13d3801287ff194f1d4ceb2a94e9abfa0ab032b51f82e79e394fd6949e027ebd9b9ca5ec6ebe842b551bd3fe46c53d93785d8f86d6d1f2b34f52e8f68ec190ad242161c07586c67f96f023bae33d5dccd3244784e9d5d52a86e448411f3"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @loopback}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x5c, 0x8, {0x0, 0x0, "4087780d27cd12141cfcee7aeb8e7feb025359b955a1b8a4e4f137cf2ff0d4c78d02233190ce8b983f9916faf60a1b500f36e25860ee51ad19b86faa434b041ff6d78811e10f5395a0558a56e4fb7246"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x97, 0x6, "9141aeb5430631dedab16a9c6d85561bc5cc651c8ca52ff4ff19a5d1704fea6dc20a5a96dbe816ce99b4f26522f20525f56cdd14587eeef6c5e7bf46f73d5f998ba01e4e40c29f178f9a9945c69466d94fc5b20ee1ed3d6a66584b770e42b4954f0aaf4da64441a03b629934bb7c04e776b9e38618b3103043f0f9ee0b137554ae74625304e4333570366d22ada2c704b98c58"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x62, 0xb, "28d30ce610d692f6c39375c252268612dd66928668e4dbfcb9433c93ba1a4712ddbafde40679f2947b63c93226d52d6a3ca35af0353e56745c43b7d7dde8a02a2e407f4d5c7ef4335ae3b29518d7eb339d868735e6514f12739db6de198c"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x14, 0x8, {0x0, 0x0, "1c930bb6f6278032"}}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0xf54}, 0x1, 0x0, 0x0, 0x4000084}, 0x24000010) 10:15:29 executing program 3: fstat(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x3) 10:15:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0xff}) 10:15:29 executing program 2: syz_open_dev$evdev(0x0, 0xc1, 0x400) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) [ 267.696364][ T4897] netlink: 3904 bytes leftover after parsing attributes in process `syz-executor.0'. 10:15:29 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:29 executing program 2: syz_open_dev$evdev(0x0, 0xc1, 0x400) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:29 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000010c0)={&(0x7f0000000080), 0xcc, &(0x7f0000001080)={&(0x7f0000002940)={0xf54, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xa0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x0, 0x12, 0x0, 0x1, [@NL80211_ATTR_BSSID, @NL80211_ATTR_SCAN_SSIDS={0x0, 0x2d, 0x0, 0x1, [{0x0, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0x0, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x0, 0x77, 0x6}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x84, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x4f}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x0, 0x0, 0xff}}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x50, 0xb, "8f5e996a443c6946fb7b9660612813b1eebbc54bd8392d1f6aa87bd469545fe3e369c7338f4166852a31a7b564920ffd994f807842ab28533b293118e0031593d9ce12da729c57a871d9ac3f"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @loopback}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x9d8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x928, 0x4, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xe6, 0x1, "7567f1bbfaa85786f3e36da49d3c7833b81d0091fdbac91d207d12e7a51e81181a98e6f313c9916cded2673fd6aa8885ba14e319fc2f88c7aa3199e3940f043876d54c4e64c1b5e89611c5f1b403adf6e3c6f4670ac20f75f0a26b57123cea82b781d42db071774593354d8fb7b9c735b84568c896ca3b31451ae8d02c6cb1105b4b7e35ebd75de4f0eae70cd9ca783878bf7f9c05bf919c8da17e7c54e89481e2ad4769be93e08aff048633a12aa317362487c2460ca566f18ab6541b1a673eb0a0e9a7d3afa2ff7a1fd8e035d4a607e00db0cba51d719e34bacd3279491b678834"}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x41, 0x2, "decac08dec5e89053ac924465f96136f0b47f59bc8c974edd8d0d00bb123e8d75c238c892ef4776085d512fece1e965ab8616be7de1ebae31a3270e7a2"}, @NL80211_PKTPAT_OFFSET={0x8}]}, {0x370, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0xf1, 0x1, "46013b2461e01890c4da47cc66b224f178c9cf4e6be473c1765277aea204d6279e227079331a46a48d4824985508b44941dae6cf29e0dee14abcb04a1af168332cb6ee757623720658779ac8beecdb3be0a975a106bb7b49dfe8f0024b84734d3457a16b77cdacb4dde1bfa8b5c5b84b3252dfd74b9eacc72f1cb949b0c4f820b2d12333f4c2122f030ab1ec6b410e51677c50276f8a0fbb5de97b127418347b0a0979f6367874c5b2c7e95d44ae1660a7ff499e9d5d48723c6255b2e9e81d32eb79eed77af535789c502d5c83eb721f5184f3ce102a974dbea10ff88df35ea324d841baee032a3b1826e577c4"}, @NL80211_PKTPAT_MASK={0x20, 0x1, "5c3c1da6db85c73bafd6f6956473f8f5bacced23e182a5550fca179f"}, @NL80211_PKTPAT_PATTERN={0x85, 0x2, "2e29fb062bcb03c60f09aae45c3773eca85da679945309ab5ccdf3471b35571f529b5fbf252f17ab1f9a2028144226a5d369649c5ea0c946497a30de5e4fd20a8528aa7c2dc4e92c7fa1c3d1f16e67560a68712ca5dd570d0e94e93dd6c2f97db4b82e6b5fb6ed58263dfedf689f6f8f0565e280758582e07aff2965ccbaf36061"}, @NL80211_PKTPAT_MASK={0xea, 0x1, "d7429ff24251645d003a0347331d69181734a9d009ac87f64a1f0df5a7600e531bd78fa15fac857d3fc8005fa960e918f9f68e8424762f43f3945d74293c3ad42f338d729a705dd404e4d19e2dcb52db9daa64fdd7dea67334381e92c34c57e29e69f4a052585b5a3a06de34c7e35140e99f1bdbc3090c65c513e2beaa4b1a42e89be8ab42d82a102fa5bbb22afba32b889c21087902f3912c4d144485974f3624decdb496bf4ab5e23b1e64c3ddee085c12239e2104a5b3860bd330022b767be84237c0321a82b0b22215ec84c4fa2a9c51701a8da140da4cc9cbdfc4a454805be335320bad"}, @NL80211_PKTPAT_MASK={0x49, 0x1, "7790f70cf50d6f7fd9c638c94f6de7b09e30c09f7348ad2ce054423017d267cb9b251747d3b37d809bb8f36b187b83e22f241fb49c8b81de28aa18ffc4f6d3ead76708c319"}, @NL80211_PKTPAT_MASK={0x87, 0x1, "d11cec8f307c62aa99dcf116405647a9240506c3617edb28a5163d85f4efea97cc5e139f2e88a9dec7f3d1266f0650d4ddeca8fdd15aada99c90b5ca9b9f9cf7f9b883791a971c963a2907d20755b2e1865bfb8b7e0fd7a79e2e5bbb393036a73a3bc6f2795439f4301ee73f45e1babde29457882c6a6a0e134810bec0a0b21c87d389"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x59, 0x2, "d6583b409388d3ec026ced03dfdb1e1c184fc7c139a6fb5576c4142c83a96f447417adffdd29d77d4e40046f48af24186aa6a8a32b8f2e98931becdd9cb8d1840f3efa06e9ed798c8a2f264db53f7de3f95f0f44c6"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_PATTERN={0x7f, 0x2, "2cc23174beb4eaa496b37c253f498d5461ea56d2032a92ae13d681cf10a602e48a14dc1b7c0d103b0a8679294eb007c200e7b630c84653479806615bd34bf1c1f6fb9da22f1b8d471efcf99ea5316900c57320562947251937c2b8e3227b81348f30b88bf67d85f5d41bb96fb5bb49acd7d2bbcd55aa8d0bac1f0c"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0xb1, 0x1, "7d3db11118fc0d568db1bede887c4076651acd3aa1a37c8384836896a1f19b23dc7b3415c42d7d1ca99a8e4817bb7b505d5aae74576a56417997edf5dcc34ed2ddaade6d3c98f6e7aa6713e8f659ae04b54f2e4f9c38ce72e970e9d4af85bae24820aeaba60ce0d96fca2c02a7f38aab95378f04efb2e56c124060b154dc8dd70ff764806b04e1b85b0cc19dcf4199496f5ad5acc9625cfe80be326d4066a257d3c208fbd0504052dced45c573"}]}, {0x2cc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0xa9, 0x2, "5e817c7bcada348c0b15cfe4750d3a2d1a9997e24a69cbf6352351e96085251a118147f8e13d27aafbdadf1aee90e4eec31557b0bd3f415a69bfbf3bedc9246e086301f2eb67f8641a99188544f9235ddd6347d851ad10f6c5da07cc56fa1eb66a7e372222ec8329d87f1002776d498fc97f97b4644c6c68b8e29c14e2820bec99389ca0902f144ceb9802c4585febd797e39c6a7e20581fc971c10b3ee7831fadf62ce6c5"}, @NL80211_PKTPAT_MASK={0x0, 0x1, "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"}, @NL80211_PKTPAT_MASK={0xf6, 0x1, "571887c548bc5a89979dc61c1db3c3185d06679f824f3e1aac9954d494ad837a2eafad7b309f94bb27fa84c8c4678868e4de2ef3856c66b1c80ea2c99e31d2de94b0ba5a42d6ff00ccc0121e0006e370204658000377619817d4ba15de54b24bb7581e917b681c86f27c9b1407ed8ea195292969a026f1c6671cb6acf3f7f5a00cd00dc0bf5c7832af2ea24c992ea35abc0c957541b38ea9254aa660f375a7349636254d49d8de709dab0b714618647039155f8bea60a2f604c183f0f698945632cb0e1db9caa09244e7983ab112a030d0e6edea10a68bf285e89be622d00b4205ba2c31f9adcbf1da148269e004daec6cfc"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x37, 0x1, "23acdd55a2b0dd35b935092ba14cc1d8470135857ef79f01c80e081bbc7d779f8024c64862788afc9cade55b9370f38ab44786"}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x90, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x70, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffeff}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_5GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xf1}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x10, 0x12, 0x0, 0x1, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x108, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xd8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xbb, 0x8, {0x0, 0x0, "f0a8b3a2166282a993fe24ab61aa047584e5c5834b0503d7a3ba18fcfa80317577992968372f833539c679f9cb6b95101bea2f7e26038c82a4386c27c872a6047aa8f991803bbd0f18ee9126258f5daf946540a529e287f1ed70c7521a0d8ffc0dd3f1768c97f2507543db9b6cd8bff274f91a3df9c7342ad05c01e81dc4662b9e5242a68af192b4a54d487b08a2b38764492f4e6b07c8881bc031928b401f984ed99863cb08685e1a082ac49ebd0e"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10}, @NL80211_WOWLAN_TCP_DST_PORT={0x6}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x78, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0xb0, 0x4, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xa0, 0x2, "e19d9021724f1210d2768029e93aeeca6f61761f1e430df495bd23113de030dc5fd605015b75eeb05e42c77ae882104dd5dc92cacbea5215df6f51ae28116c370e6f8e03f115a97280e1af6276b90ff05f57bc7ad764038770c669bc5c8e6bcbc6684fac36385a41dcbdb7589cdb8501d3a39ed2e5a51870395a78f14b384c6465cf4b72fc02ddf528813578fe04f9ee2422f09c26a9e208d6b074ae"}, @NL80211_PKTPAT_OFFSET={0x8}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x268, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x0, 0x1, @private}, @NL80211_WOWLAN_TCP_DST_MAC={0x0, 0x3, @broadcast}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x25c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xbe, 0xa, "f49e446fbca4873915f4c35290d91f57229705a7d6619cbb5aa364b70ad2bb04b4f0cf2e97f0f6ec90e4c6689d285efb4c746a3428214ad4c8cb167de9f58f25a1147554465fdd4786afa9a7ef84207bf647c4a90f3625edf70ca253b13d3801287ff194f1d4ceb2a94e9abfa0ab032b51f82e79e394fd6949e027ebd9b9ca5ec6ebe842b551bd3fe46c53d93785d8f86d6d1f2b34f52e8f68ec190ad242161c07586c67f96f023bae33d5dccd3244784e9d5d52a86e448411f3"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast1}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @loopback}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x5c, 0x8, {0x0, 0x0, "4087780d27cd12141cfcee7aeb8e7feb025359b955a1b8a4e4f137cf2ff0d4c78d02233190ce8b983f9916faf60a1b500f36e25860ee51ad19b86faa434b041ff6d78811e10f5395a0558a56e4fb7246"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x97, 0x6, "9141aeb5430631dedab16a9c6d85561bc5cc651c8ca52ff4ff19a5d1704fea6dc20a5a96dbe816ce99b4f26522f20525f56cdd14587eeef6c5e7bf46f73d5f998ba01e4e40c29f178f9a9945c69466d94fc5b20ee1ed3d6a66584b770e42b4954f0aaf4da64441a03b629934bb7c04e776b9e38618b3103043f0f9ee0b137554ae74625304e4333570366d22ada2c704b98c58"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x62, 0xb, "28d30ce610d692f6c39375c252268612dd66928668e4dbfcb9433c93ba1a4712ddbafde40679f2947b63c93226d52d6a3ca35af0353e56745c43b7d7dde8a02a2e407f4d5c7ef4335ae3b29518d7eb339d868735e6514f12739db6de198c"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x14, 0x8, {0x0, 0x0, "1c930bb6f6278032"}}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0xf54}, 0x1, 0x0, 0x0, 0x4000084}, 0x24000010) [ 267.836283][ T4908] netlink: 3904 bytes leftover after parsing attributes in process `syz-executor.0'. 10:15:30 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:30 executing program 0: mq_open(&(0x7f00000000c0)='\x9f\x95\xb0\xb1G;\x1a\xd2\x8bC\x8eC\xea-\x88[\x0f--i\xa9\x98\xbaFxBO[\xc8z!i\x04w\x0e\x9c \xc6\xcf\v\xc8\x15\xc9\xa4\t\xb1\x1f\xf8b\x12\xaa\xf0\xb1\x1c*_\xf6{\xa1}\xd0\x1d\xb2\xe3,J\xef\x06)\x1d\xdco\x039\'\xc3\xf5\x982\xe6\xb0L\xea\x0fn8\xd4\x17\r*0\x1d\x15\xd7Pd\xb1\x7f\x94!\x9d,\x98\x93\x87\xcb\xdf\xa1\x14\xb7I\n\x1b\xd1\x02\x00\xe8\xab\\\x16\xbdw\xdf\xcde\x1c\xd8\x98\x9b\x8b\x03\xff\xb5\xf2\xdd\x83\xce\xc6\xeah\x8f\x86\xba8\\\xcd#]\x88\t\xef\x11\t,U\x0en\xbc\xc3.(<\x98\xb2\x86\x81Y\xa5\x9e\xd5e\xfc.', 0x0, 0x0, 0x0) 10:15:30 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003bc0), 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 10:15:30 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x400) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:30 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) [ 268.455492][ T39] audit: type=1400 audit(1661595330.219:206): avc: denied { map } for pid=4913 comm="syz-executor.3" path="/proc/4913/net/pfkey" dev="proc" ino=4026533070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 10:15:30 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 10:15:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) [ 268.534538][ T39] audit: type=1400 audit(1661595330.299:207): avc: denied { getopt } for pid=4922 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 10:15:30 executing program 0: r0 = fsopen(&(0x7f0000001740)='ocfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, 0x0, 0x0, 0xffffffffffffffff) 10:15:30 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x400) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:30 executing program 1: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:30 executing program 0: r0 = socket(0x23, 0x2, 0x0) getpeername$ax25(r0, 0x0, 0x0) 10:15:30 executing program 1: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:30 executing program 1: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:30 executing program 0: r0 = socket(0x11, 0xa, 0x0) getpeername$ax25(r0, 0x0, 0x0) 10:15:30 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x400) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:30 executing program 0: ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) 10:15:30 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:30 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 268.800612][ T39] audit: type=1400 audit(1661595330.559:208): avc: denied { read } for pid=4948 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 10:15:30 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:30 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:30 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000001400), 0x0) 10:15:30 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:30 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:30 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001b00)={&(0x7f0000001940), 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001c00)=""/200, 0xc8}], 0x2}, 0x0) sendmsg$inet(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="e46fdb9f83c8e025b92dd10c0789d21e66e853ac544ac855afb1324408d62c9893c9c3dba73eae146c35a52714ffa98307b6e6dbf4602942a50a6cdd07ed0c1c54573bf114bdcdec29e4c7f89b13d82b26ca55f1cd6143de5f5392f5e53dc43166df69ff5becb61647b846bbcaa5c83a7957e6ee1894495544aeb7f56a2cdbce97d1e63fc9f13e02e71aa5d50c9f65e53fd2d2288f9e72169f87cda09512226ad1ac6691ca3178587c91fd8a060efe199afaa694e58ab4a4304d97f7a868b43c7f78ad1bd534ff92", 0xc8}], 0x1}, 0x0) 10:15:30 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 269.048406][ T39] audit: type=1400 audit(1661595330.809:209): avc: denied { ioctl } for pid=4977 comm="syz-executor.0" path="socket:[36211]" dev="sockfs" ino=36211 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 10:15:30 executing program 3: recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:30 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) r0 = syz_open_dev$evdev(0x0, 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:30 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:30 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000)) 10:15:30 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) r0 = syz_open_dev$evdev(0x0, 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:30 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000)) 10:15:30 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:30 executing program 3: recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:30 executing program 3: recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:31 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000)) 10:15:31 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) r0 = syz_open_dev$evdev(0x0, 0x3ff, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:31 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000180)={0xffff0000, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:31 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:31 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000000)) 10:15:31 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:31 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:31 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) 10:15:31 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:31 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:31 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) 10:15:31 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) 10:15:31 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000001700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x28, 0x0, 0x0, "500bdddd342eb50ae0904d049cdb0a29eb"}, 0x28}], 0x1, 0x0) 10:15:31 executing program 3: syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 270.179178][ T39] audit: type=1400 audit(1661595331.939:210): avc: denied { create } for pid=5017 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 10:15:31 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) 10:15:31 executing program 3: syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:31 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x0, 0x401) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) [ 270.202690][ T39] audit: type=1400 audit(1661595331.949:211): avc: denied { write } for pid=5017 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 10:15:31 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0x0, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:32 executing program 3: syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:32 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r0, 0x0, 0x0, 0x12120, 0x0, 0x0) 10:15:32 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0x0, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) [ 270.311118][ T39] audit: type=1400 audit(1661595332.069:212): avc: denied { read } for pid=5032 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 10:15:32 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r0, 0x0, 0x0, 0x12120, 0x0, 0x0) 10:15:32 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0x0, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:32 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:32 executing program 3: prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096) 10:15:32 executing program 3: socket(0x11, 0x2, 0x4) 10:15:32 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r0, 0x0, 0x0, 0x12120, 0x0, 0x0) 10:15:32 executing program 0: r0 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r0, 0x0, 0x0, 0x12120, 0x0, 0x0) 10:15:32 executing program 1: socketpair(0x26, 0x5, 0x9, 0x0) 10:15:32 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, &(0x7f0000000080)=""/17, 0x11) 10:15:32 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x4) 10:15:33 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r0, &(0x7f0000000040)=""/58, 0xfffffffffffffef9) 10:15:33 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:33 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, &(0x7f0000000080)=""/17, 0x11) 10:15:33 executing program 1: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000140), 0x0, 0x0) 10:15:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 10:15:33 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x29, 0x0, &(0x7f0000000200)) 10:15:33 executing program 1: mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 10:15:33 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0x0, 0x0, 'client1\x00', 0x0, "7a3a32c27422d65a", "30e86e54ded2e90a3919657c254737eb0079fc458227332d92c865bd60591b47"}) 10:15:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:33 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) r5 = syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) syz_usb_disconnect(r5) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001780)=0x5) 10:15:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) 10:15:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:33 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000001400)=""/55) 10:15:34 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) 10:15:34 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000001400)=""/55) [ 272.352214][ T15] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 272.381978][ T3742] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 272.592329][ T15] usb 8-1: Using ep0 maxpacket: 16 [ 272.651965][ T3742] usb 6-1: Using ep0 maxpacket: 16 [ 272.792809][ T15] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.806803][ T15] usb 8-1: config 1 has no interface number 1 [ 272.810871][ T15] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 272.922146][ T3742] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.941128][ T3742] usb 6-1: config 1 has no interface number 1 [ 272.950625][ T3742] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 272.982533][ T15] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.004444][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.014833][ T15] usb 8-1: Product: syz [ 273.017699][ T15] usb 8-1: Manufacturer: syz [ 273.021469][ T15] usb 8-1: SerialNumber: syz [ 273.122340][ T3742] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.129945][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.137336][ T3742] usb 6-1: Product: syz [ 273.141471][ T3742] usb 6-1: Manufacturer: syz [ 273.146271][ T3742] usb 6-1: SerialNumber: syz [ 273.372971][ T15] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 273.380030][ T15] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 273.438860][ T15] usb 8-1: USB disconnect, device number 12 [ 273.502167][ T3742] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 273.508200][ T3742] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 273.516970][ T39] audit: type=1400 audit(1661595335.279:213): avc: denied { rename } for pid=3114 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.540215][ T39] audit: type=1400 audit(1661595335.279:214): avc: denied { unlink } for pid=3114 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.542883][ T3742] usb 6-1: USB disconnect, device number 10 [ 273.564567][ T39] audit: type=1400 audit(1661595335.279:215): avc: denied { create } for pid=3114 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 273.720332][ T4222] udevd[4222]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.760480][ T4222] udevd[4222]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 10:15:35 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) 10:15:35 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) r4 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x401) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000001400)=""/55) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001440)=""/134) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000001500)={0x2, 0x3, 0x20}) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7e4d, 0x9e}, [@feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x1, 0xe, 0x5, 0x8, 0x4, 0x4]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x80, 0x2, 0x2, 0x0, "701a3e1bee15a970"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1, 0x0, {0x7, 0x25, 0x1, 0xc0, 0x90, 0x539}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x2}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xca, 0x2, 0x7, 0x7f, 'r'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0x47, {0x7, 0x25, 0x1, 0x81, 0x7, 0x400}}}}}}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x5, 0x2, 0x40, 0x8, 0x49}, 0x26, &(0x7f0000001640)={0x5, 0xf, 0x26, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x20, 0x7f}]}, 0x1, [{0xb5, &(0x7f0000001680)=@string={0xb5, 0x3, "b83d8a06c63a9db839a0477843c3406cf79eb4e1376f333845117fd46c1a31730432a750d39e2cd171875bad89c68f14dee44572516ed718a63145641bf710d0f2b15ef1e9d3443253cfda7e7ed4414823eb338c5aea19af2eb24d677b0da6b8874eccaeb99b453800710b1d2367cbaa9f55df0a3ebb4a40d4436df6abbcb2cb275c002d345ad807202e03cd87cdd1c2bcdeee4a08393904e234755b9a17890ec7899fe35beb4374f390596825b686c860bd8c"}}]}) 10:15:35 executing program 1: syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000002680), 0x300801b, &(0x7f0000000480)) [ 274.216860][ T5104] Mount JFS Failure: -22 10:15:36 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) 10:15:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000001280)=""/60) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:36 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone3(&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[0x0], 0x1}, 0x58) 10:15:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x100c, 0x1}, 0x48) 10:15:36 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x6, 0x6, 0x301}, 0x14}}, 0x0) [ 274.561953][ T3744] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 274.842033][ T3744] usb 8-1: Using ep0 maxpacket: 16 [ 275.072138][ T3744] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 275.083293][ T3744] usb 8-1: config 1 has no interface number 1 [ 275.090066][ T3744] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 275.262431][ T3744] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.270448][ T3744] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.278443][ T3744] usb 8-1: Product: syz [ 275.284424][ T3744] usb 8-1: Manufacturer: syz [ 275.288810][ T3744] usb 8-1: SerialNumber: syz [ 275.622240][ T3744] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 275.628968][ T3744] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 275.660289][ T3744] usb 8-1: USB disconnect, device number 13 [ 275.787699][ T4887] udevd[4887]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 10:15:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) 10:15:37 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_clone3(&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[0x0], 0x1}, 0x58) 10:15:37 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x401054d5, 0x0) 10:15:37 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write$input_event(r0, 0x0, 0x0) [ 276.356757][ T39] audit: type=1400 audit(1661595338.119:216): avc: denied { write } for pid=5131 comm="syz-executor.2" name="uinput" dev="devtmpfs" ino=863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 10:15:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0) 10:15:38 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000600)={&(0x7f0000000480)={0xa}, 0x2000048c, &(0x7f00000005c0)={0x0}}, 0xfc) 10:15:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:38 executing program 1: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000013c0), 0x3ff, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) 10:15:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x60}}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000e00)={0x7, 0x7, 0x4}, &(0x7f0000000e40)=0x28) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000fd07f100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x300}, {}, {0xc}}, [@filter_kind_options=@f_route={{0xa}, {0x4, 0xf}}]}, 0x34}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @local}, &(0x7f0000000180)=0xc) dup(r0) [ 276.928470][ T39] audit: type=1400 audit(1661595338.689:217): avc: denied { getopt } for pid=5141 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 10:15:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0xa, 0x101}, 0x14}}, 0x0) [ 276.929759][ T5143] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 10:15:38 executing program 3: socketpair(0xa, 0x80005, 0x0, &(0x7f0000000140)) 10:15:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x13, 0xa, 0x3}, 0x14}}, 0x0) 10:15:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x14, 0x0, 0x101, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) 10:15:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x100c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 10:15:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x60}}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000e00)={0x7, 0x7, 0x4}, &(0x7f0000000e40)=0x28) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000fd07f100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x300}, {}, {0xc}}, [@filter_kind_options=@f_route={{0xa}, {0x4, 0xf}}]}, 0x34}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @local}, &(0x7f0000000180)=0xc) dup(r0) [ 277.303632][ T5162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 10:15:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 10:15:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 10:15:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 10:15:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000), 0xc) 10:15:39 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000001300)={{0x12, 0x1, 0x0, 0xd0, 0x3c, 0x50, 0x40, 0x1199, 0x685a, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc7, 0xc2, 0xfb}}]}}]}}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000019c0)=@string={0x2}}, {0x2, &(0x7f0000001a00)=@string={0x2}}]}) [ 277.727687][ T39] audit: type=1400 audit(1661595339.479:218): avc: denied { bind } for pid=5175 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 10:15:39 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/147, &(0x7f0000000340)=0x93) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, 0x0, 0x0, 0x4, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9800}, 0x44) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:15:39 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000540)=""/147, &(0x7f0000000340)=0x93) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, 0x0, 0x0, 0x4, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9800}, 0x44) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:15:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) [ 277.991985][ T3741] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 278.402059][ T3741] usb 7-1: language id specifier not provided by device, defaulting to English [ 278.522227][ T3741] usb 7-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=d3.b1 [ 278.530160][ T3741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.543606][ T3741] usb 7-1: Product: syz [ 278.548745][ T3741] usb 7-1: SerialNumber: syz [ 278.571022][ T3741] usb 7-1: config 0 descriptor?? 10:15:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000bc40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) 10:15:40 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18}, 0x18}}, 0x0) 10:15:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) [ 278.614459][ T3741] sierra 7-1:0.0: Sierra USB modem converter detected [ 278.642389][ T39] audit: type=1400 audit(1661595340.409:219): avc: denied { nlmsg_tty_audit } for pid=5197 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 10:15:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) [ 278.829662][ T3741] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 278.848598][ T3741] usb 7-1: USB disconnect, device number 13 [ 278.883680][ T3741] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 278.895115][ T3741] sierra 7-1:0.0: device disconnected 10:15:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001240)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 10:15:41 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40485404, 0x0) 10:15:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000010c0)=""/227) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x54e3, 0x0) 10:15:41 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, r0, 0x2849342acd85dde3, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}]}, 0x44}}, 0x0) [ 279.423396][ T5215] pim6reg1: tun_chr_ioctl cmd 21731 10:15:41 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1, &(0x7f0000000140)=@raw=[@func], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:15:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:41 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x44, r0, 0x2849342acd85dde3, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}]}, 0x44}}, 0x0) 10:15:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:41 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:41 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:41 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:43 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:43 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:43 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:43 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:43 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:43 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:43 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x5420, 0x0) 10:15:43 executing program 1: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x5420, 0x0) 10:15:43 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x5420, 0x0) 10:15:43 executing program 1: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x5420, 0x0) 10:15:44 executing program 3: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x5420, 0x0) 10:15:44 executing program 1: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x5420, 0x0) 10:15:44 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) ioctl$EVIOCSABS0(r0, 0x401845c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:44 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:44 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:45 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:45 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x400) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:46 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:46 executing program 0: syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:46 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:46 executing program 0: syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:46 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:46 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:46 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:47 executing program 0: syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x5420, 0x0) 10:15:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x5420, 0x0) 10:15:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:47 executing program 0: r0 = syz_open_dev$evdev(0x0, 0xc1, 0x400) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x5420, 0x0) 10:15:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x5420, 0x0) 10:15:47 executing program 0: r0 = syz_open_dev$evdev(0x0, 0xc1, 0x400) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:47 executing program 0: r0 = syz_open_dev$evdev(0x0, 0xc1, 0x400) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:47 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x5420, 0x0) 10:15:47 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x5420, 0x0) 10:15:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x400) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:48 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x5420, 0x0) 10:15:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x400) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x400) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:50 executing program 3: mq_open(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0, 0x0) 10:15:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:50 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x1}, 0x18) [ 288.774720][ T39] audit: type=1400 audit(1661595350.539:220): avc: denied { ioctl } for pid=5419 comm="syz-executor.3" path="socket:[36557]" dev="sockfs" ino=36557 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 10:15:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(0x0, 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:50 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x1}, 0x18) [ 288.880921][ T39] audit: type=1400 audit(1661595350.559:221): avc: denied { bind } for pid=5419 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 10:15:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:50 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(0x0, 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@generic={0x81}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc1, &(0x7f00000000c0)=""/193, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:15:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(0x0, 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@generic={0x81}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc1, &(0x7f00000000c0)=""/193, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 10:15:51 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000480)) 10:15:51 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:51 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001240)={0x0, 0x0, 0x8}, 0xc) 10:15:51 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x541b, 0x0) 10:15:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:52 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000001300)={{0x12, 0x1, 0x0, 0xd0, 0x3c, 0x50, 0x40, 0x1199, 0x685a, 0xd3b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xc7, 0xc2, 0xfb, 0x0, [], [{{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 10:15:52 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x64}]}) [ 290.334770][ T39] audit: type=1400 audit(1661595352.099:222): avc: denied { read } for pid=5462 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 290.359864][ T39] audit: type=1400 audit(1661595352.119:223): avc: denied { open } for pid=5462 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 290.382914][ T39] audit: type=1400 audit(1661595352.119:224): avc: denied { ioctl } for pid=5462 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=711 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 290.581975][ T48] usb 8-1: new high-speed USB device number 14 using dummy_hcd 10:15:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:52 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGDEBUG(r0, 0x4010744d, &(0x7f0000000600)) 10:15:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), r0) 10:15:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) [ 290.972316][ T48] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 291.132312][ T48] usb 8-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=d3.b1 [ 291.140033][ T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.156696][ T48] usb 8-1: Product: syz [ 291.165498][ T48] usb 8-1: Manufacturer: syz [ 291.170342][ T48] usb 8-1: SerialNumber: syz [ 291.237537][ T48] usb 8-1: config 0 descriptor?? [ 291.294649][ T48] sierra 8-1:0.0: Sierra USB modem converter detected [ 291.517387][ T48] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 291.543631][ T48] usb 8-1: USB disconnect, device number 14 [ 291.589277][ T48] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 291.597810][ T48] sierra 8-1:0.0: device disconnected 10:15:54 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGDEBUG(r0, 0x40047440, &(0x7f0000000600)) 10:15:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f000000bc40)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x801}, @NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_HANDLE={0xc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0xb100da50deb0dff3, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x14}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14}}, 0x124}}, 0x0) 10:15:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:54 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGDEBUG(r0, 0x8010743f, 0x0) 10:15:54 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGDEBUG(r0, 0x80047456, 0x0) 10:15:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:54 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 0', 0x1b) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/53, 0x35}], 0x1, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007440)={0x0, &(0x7f0000002140)={0x18, 0xfffffffffffffff5, 0x0, {0xfff}}, &(0x7f0000002180)={0x18, 0x0, 0x8001, {0x1000100000000000}}, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x0, {0xfffff004}}, 0x0, 0x0, &(0x7f0000006400)={0x60, 0x0, 0x2, {{0x670, 0x80000000, 0x7, 0x55, 0x5, 0x800, 0x4, 0x7fffffff}}}, &(0x7f0000006480)={0x18, 0x0, 0x4}, &(0x7f0000000880)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0}) getgroups(0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001940), 0x1f1002, 0x0) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r1) 10:15:54 executing program 1: syz_clone(0x80200, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) syz_clone(0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000), 0x0, 0x0) socketpair(0x9, 0x0, 0x0, 0x0) syz_clone(0x50084080, &(0x7f0000000100)="f9126d9175d43c01d83cdd55c9ee5a74aba154e13689eb5974597a3955c1766547f71f58d9f3fd3e14055f31861aa10436f845f30b1d1a252ddd0b62f54a22629f19db40f4d4ffefbf5dcae3da8b781295f14392ca7c7f1ca42d5b646cc1ca2db1447e", 0x63, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)="569a67d6afca38e212db5c97fdaa7c9e89e2bff60372b3fb350a72ae83a1d4b1b372d8f392aed6bd683a3b33426bb954cc470e381cdd2ecaa6af4893b703dd9d4f6c7225ccc307302b8cee7fcff099b3abd069bd8c7cffb6930f7563afb3b6d05bcdb74bbbefe8ab1cfa8fb1a0aa10e2d67472794ffb81b146ddadd7febde37e14feba3eaa1728d86c6fc3b83581f857b0fa4c4b44b706") [ 292.843301][ T39] audit: type=1400 audit(1661595354.609:225): avc: denied { sys_admin } for pid=5500 comm="syz-executor.1" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 10:15:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:55 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)) 10:15:55 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045005, &(0x7f0000000000)=0x40000) 10:15:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:15:55 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045005, &(0x7f0000000000)=0x40000) 10:15:55 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGDEBUG(r0, 0x8010743f, &(0x7f0000000600)) 10:15:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:55 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGDEBUG(r0, 0x40047440, 0x0) 10:15:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000840)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000600)={0x0, 0x1, 0x6, @local}, 0x10) 10:15:56 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGDEBUG(r0, 0x4004743b, 0x0) [ 294.671658][ T39] audit: type=1400 audit(1661595356.429:226): avc: denied { ioctl } for pid=5532 comm="syz-executor.1" path="socket:[36676]" dev="sockfs" ino=36676 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 10:15:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000002b) [ 294.698927][ T5533] device veth0 entered promiscuous mode [ 294.704718][ T39] audit: type=1400 audit(1661595356.439:227): avc: denied { setopt } for pid=5532 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 294.706217][ T5532] device veth0 left promiscuous mode [ 294.742351][ T15] Bluetooth: hci1: command 0x0405 tx timeout 10:15:56 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffb000), 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) 10:15:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c"], 0x80}, 0x0) 10:15:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000140), 0x14) 10:15:56 executing program 1: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 10:15:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) sendmsg(r0, &(0x7f0000001600)={&(0x7f0000000180)=@in={0x10, 0x2}, 0x10, &(0x7f00000014c0)=[{0x0}, {&(0x7f0000000340)="96", 0x1}], 0x2}, 0x0) 10:15:56 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x400000) [ 296.831406][ T39] audit: type=1400 audit(1661595358.589:228): avc: denied { listen } for pid=5557 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 10:15:58 executing program 1: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x25, &(0x7f00000001c0), 0x4) 10:15:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000002b) 10:15:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:58 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) dup2(0xffffffffffffffff, r0) 10:15:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000240)=0xb) 10:15:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000180)={0x0, @in, 0xffffffff, 0x0, 0x206, 0x0, 0x20}, 0x98) 10:15:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:15:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) [ 297.459034][ T5587] pim6reg1: tun_chr_ioctl cmd 1074025698 10:15:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) [ 297.730436][ T5590] pim6reg1: tun_chr_ioctl cmd 1074025698 [ 298.435643][ T5594] pim6reg1: tun_chr_ioctl cmd 1074025698 10:15:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000002b) 10:15:59 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000002b) 10:15:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:15:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:16:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) [ 298.624765][ T5604] pim6reg1: tun_chr_ioctl cmd 1074025698 10:16:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)) syz_open_dev$evdev(&(0x7f0000001240), 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:16:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:00 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(0x0, 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:16:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(0x0, 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:16:01 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:16:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:16:01 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000006940)=[{0x10, 0x1, 0x1}], 0x10}, 0x0) 10:16:01 executing program 3: syz_clone(0x4804400, 0x0, 0x0, 0x0, 0x0, 0x0) 10:16:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:16:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:01 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) 10:16:01 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:16:01 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000012c0)=""/249) 10:16:01 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) 10:16:01 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@typedef={0x5}, @var, @enum={0x2, 0x2, 0x0, 0x6, 0x4, [{0x7}, {0xf, 0xecef}]}]}}, &(0x7f00000000c0)=""/249, 0x52, 0xf9, 0x1}, 0x20) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) syz_clone(0x40000000, &(0x7f00000001c0)="23b4038c2da55e25f03b9637a67ce9aba5009ac4574ceed6ebca6c44d3cc0b663ee6e1824a4da776ff9c35fe7d812f08d2044c86d1dc5d93f3cb26aca62520010a740f2add4b6d5bbc3fc13aab9847b3cae2aeb64f0a35564f87766a2c6a627cba3d8615030000224b4ab273047a3422774ffabcd47ec2548ba3b2f454e9b180fb688001bd247b7c3b4c2e49a2d593492df0e47f864a731a5cb915a190a018f24c8aa4975f5f888bf7728852f3ba587c2cbaaf7d97aeccc2304a09f24be34f3f", 0xc0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000003c0)="65140dddce895868623871a39a536f8560886562b535cb0a8f36e2ad5974c7bb45bb508db2a0f591f4736eeb551b69840b3f028b882c838e725528206e9438f172aecbbd91301dde1a26ccf68398afcedf41f6edaa254c26a42c7cd7830b9fd41471129592f0eead2c167f4045") 10:16:01 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) 10:16:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:01 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(0x0, 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000012c0)=""/249) 10:16:02 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x76}]}}, &(0x7f00000000c0)=""/252, 0x2a, 0xfc, 0x1}, 0x20) 10:16:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:02 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(0x0, 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000012c0)=""/249) 10:16:02 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:16:02 executing program 3: syz_clone(0x8040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000180), 0x0, 0x0) 10:16:02 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(0x0, 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000012c0)=""/249) 10:16:02 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000002b) 10:16:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) 10:16:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x16, 0x0, 0xa0, 0xffffff7f}, 0x48) 10:16:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(0x0, 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) 10:16:03 executing program 3: socketpair(0x28, 0x0, 0x74c, &(0x7f00000002c0)) 10:16:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:03 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(0x0, 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) 10:16:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x5, 0x815, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xd}, 0x48) 10:16:03 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000002b) 10:16:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) [ 302.396307][ T39] audit: type=1400 audit(1661595364.159:229): avc: denied { read } for pid=5720 comm="syz-executor.3" name="autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 302.418412][ T39] audit: type=1400 audit(1661595364.159:230): avc: denied { open } for pid=5720 comm="syz-executor.3" path="/dev/autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 10:16:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x80000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001200)=0x4) syz_open_dev$evdev(0x0, 0x0, 0x80000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) 10:16:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:04 executing program 3: io_setup(0x2, &(0x7f0000000040)=0x0) r1 = openat$autofs(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x80000001}]) 10:16:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:04 executing program 3: bpf$MAP_CREATE(0x2, 0x0, 0x1e) 10:16:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:05 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000001500850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x90, &(0x7f00000002c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:05 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60}, 0x60) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18}, 0x18) 10:16:05 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8000002b) 10:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:05 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x80) [ 303.545351][ T39] audit: type=1400 audit(1661595365.309:231): avc: denied { create } for pid=5743 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 10:16:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 303.593986][ T39] audit: type=1400 audit(1661595365.319:232): avc: denied { getopt } for pid=5743 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 10:16:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x3, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) 10:16:05 executing program 3: socket(0x3, 0x0, 0x413) 10:16:06 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 10:16:06 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 10:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:06 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r1, r2, 0x0, 0x8000002b) 10:16:06 executing program 0: syz_clone(0x4a048400, 0x0, 0x0, 0x0, 0x0, 0x0) 10:16:06 executing program 3: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [], 0x22}}) [ 304.413035][ T5765] fuse: Bad value for 'fd' 10:16:06 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) 10:16:06 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)='F', 0x1}, {&(0x7f0000000c40)="8c", 0x1}, {&(0x7f0000000800)="1a", 0x1}, {&(0x7f00000008c0)='*', 0x1}], 0x4, &(0x7f0000000940)="5b074655d9e8f18fe83ee43fc617e4ef9da3dd86aeca4aafaa895213b21a276626d8dc606f", 0x25}, 0x0) [ 304.465458][ T5768] loop3: detected capacity change from 0 to 264192 10:16:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:06 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) [ 304.537024][ T39] audit: type=1400 audit(1661595366.299:233): avc: denied { mount } for pid=5767 comm="syz-executor.3" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 10:16:06 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x2}, 0x10) [ 304.610742][ T39] audit: type=1400 audit(1661595366.359:234): avc: denied { unmount } for pid=3705 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 305.506761][ T39] audit: type=1400 audit(1661595367.269:235): avc: denied { mount } for pid=5780 comm="syz-executor.3" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 305.540185][ T39] audit: type=1400 audit(1661595367.299:236): avc: denied { unmount } for pid=3705 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 10:16:07 executing program 0: prctl$PR_SET_NO_NEW_PRIVS(0x25, 0x20000000) 10:16:07 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)) 10:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) 10:16:07 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r1, r2, 0x0, 0x8000002b) 10:16:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x15, 0x0, 0x0) 10:16:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0x10, 0x3, [], "e966b2"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "d8"}]}}, &(0x7f0000000500)=""/140, 0x36, 0x8c, 0x1}, 0x20) 10:16:07 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x35}]}) 10:16:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) 10:16:07 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:16:07 executing program 3: syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB=',ro']) [ 306.499882][ T39] audit: type=1400 audit(1661595368.259:237): avc: denied { bind } for pid=5803 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 10:16:08 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 10:16:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) 10:16:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r1, r2, 0x0, 0x8000002b) 10:16:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0xee01}, 0xc) 10:16:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x3, 0x0, [{0x17b, 0x0, 0x2}]}) 10:16:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) 10:16:08 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0xb43, 0x0) 10:16:08 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) 10:16:08 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xf5, 0x6a, 0xe7, 0x10, 0x12d1, 0x4ffc, 0xec6c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x4, 0x1, 0x0, [], [{}]}}]}}]}}, 0x0) [ 306.992284][ T48] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 307.072214][ T3330] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 307.232143][ T48] usb 8-1: Using ep0 maxpacket: 8 [ 307.332105][ T3330] usb 5-1: Using ep0 maxpacket: 16 [ 307.432658][ T48] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 307.475110][ T3330] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 307.612389][ T48] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 307.621790][ T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.667169][ T48] usb 8-1: Product: syz [ 307.677624][ T3330] usb 5-1: New USB device found, idVendor=12d1, idProduct=4ffc, bcdDevice=ec.6c [ 307.698925][ T48] usb 8-1: Manufacturer: syz [ 307.702601][ T3330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.704438][ T48] usb 8-1: SerialNumber: syz [ 307.710412][ T3330] usb 5-1: Product: syz [ 307.710434][ T3330] usb 5-1: Manufacturer: syz [ 307.710450][ T3330] usb 5-1: SerialNumber: syz [ 307.714426][ T3330] usb 5-1: config 0 descriptor?? [ 307.785058][ T3330] option 5-1:0.0: GSM modem (1-port) converter detected 10:16:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 10:16:09 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) [ 307.858071][ T5822] pim6reg1: tun_chr_ioctl cmd 1074025698 [ 307.965567][ T3330] usb 8-1: USB disconnect, device number 15 [ 307.985460][ T171] usb 5-1: USB disconnect, device number 7 [ 307.991526][ T171] option 5-1:0.0: device disconnected 10:16:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) 10:16:10 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc20) 10:16:10 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) 10:16:10 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_class_of_dev={{}, {0x0, "3fbb0f"}}}}, 0xa) [ 308.627671][ T5832] pim6reg1: tun_chr_ioctl cmd 1074025698 10:16:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) dup(0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) 10:16:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) dup(0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) 10:16:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) [ 308.852274][ T5840] pim6reg1: tun_chr_ioctl cmd 1074025698 [ 308.854519][ T971] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 309.102177][ T971] usb 8-1: Using ep0 maxpacket: 8 [ 309.139564][ T39] audit: type=1804 audit(1661595370.899:238): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3208692834/syzkaller.k1gy2Q/226/bus" dev="sda1" ino=1151 res=1 errno=0 10:16:10 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:16:10 executing program 0: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6a142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x541b, &(0x7f0000000300)={0x1, 0x0, 0x1000, 0x100000, 0x0, 0x0, 0x0, 0x0}) [ 309.302519][ T971] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 10:16:11 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x18, &(0x7f00000000c0)=ANY=[]) [ 309.522313][ T971] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 309.531339][ T971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.573894][ T971] usb 8-1: Product: syz [ 309.583828][ T971] usb 8-1: Manufacturer: syz [ 309.612035][ T971] usb 8-1: SerialNumber: syz [ 309.653134][ T40] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 309.882267][ T971] usb 8-1: USB disconnect, device number 16 [ 310.172325][ T40] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 310.250494][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.305135][ T40] usb 5-1: Product: syz [ 310.316511][ T40] usb 5-1: Manufacturer: syz [ 310.323646][ T40] usb 5-1: SerialNumber: syz [ 310.375217][ T40] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 10:16:12 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000002740), 0x222c0, 0x0) 10:16:12 executing program 1: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f00000001c0), 0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) 10:16:12 executing program 3: migrate_pages(0x0, 0x8, 0x0, &(0x7f0000000a00)=0x10001) 10:16:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)=""/57, 0x39}], 0x2, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:16:12 executing program 1: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f00000001c0), 0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) [ 311.072305][ T40] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 10:16:12 executing program 3: migrate_pages(0x0, 0x8, 0x0, &(0x7f0000000a00)=0x10001) 10:16:12 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0) read$dsp(r0, &(0x7f0000000000)=""/119, 0x77) [ 311.482229][ T3744] usb 5-1: USB disconnect, device number 8 [ 312.182157][ T40] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 312.189450][ T40] ath9k_htc: Failed to initialize the device [ 312.199560][ T3744] usb 5-1: ath9k_htc: USB layer deinitialized 10:16:14 executing program 3: migrate_pages(0x0, 0x8, 0x0, &(0x7f0000000a00)=0x10001) 10:16:14 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000540)='.log\x00', 0x0, 0x0) 10:16:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x8000002b) 10:16:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d", 0x0, 0x0, {0x4}, {}, 0x0, [0x0, 0x0, 0x0, 0x200, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x8, 0x0, 0x2]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"50ef7c2ff362935080fed2bdd95ca7e3", 0x0, 0x0, {0x20, 0x9}, {0x1, 0x4}, 0x0, [0x0, 0xc80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6369, 0x9, 0xffffffffffff549c]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) preadv(r0, 0x0, 0x0, 0x4, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:16:14 executing program 1: open(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, &(0x7f0000000380)) 10:16:14 executing program 3: migrate_pages(0x0, 0x8, 0x0, &(0x7f0000000a00)=0x10001) [ 312.410795][ T39] audit: type=1400 audit(1661595374.169:239): avc: denied { write } for pid=5876 comm="syz-executor.1" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 10:16:14 executing program 1: r0 = syz_io_uring_setup(0x4fc2, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) 10:16:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="09000100010000", 0x7) [ 312.600397][ T39] audit: type=1400 audit(1661595374.359:240): avc: denied { bind } for pid=5884 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.601418][ T5885] Bluetooth: MGMT ver 1.22 [ 312.649597][ T39] audit: type=1400 audit(1661595374.359:241): avc: denied { write } for pid=5884 comm="syz-executor.3" path="socket:[39074]" dev="sockfs" ino=39074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.665114][ T3744] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 312.697884][ T3744] Bluetooth: hci1: Injecting HCI hardware error event [ 312.712272][ T3720] Bluetooth: hci1: hardware error 0x00 [ 312.718898][ T3720] ------------[ cut here ]------------ [ 312.725014][ T3720] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: 0x0 [ 312.735499][ T3720] WARNING: CPU: 2 PID: 3720 at lib/debugobjects.c:502 debug_print_object+0x16e/0x250 [ 312.743905][ T3720] Modules linked in: [ 312.746894][ T3720] CPU: 2 PID: 3720 Comm: kworker/u19:8 Not tainted 6.0.0-rc2-syzkaller-00248-ge022620b5d05 #0 [ 312.758289][ T3720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 312.767386][ T3720] Workqueue: hci1 hci_error_reset [ 312.773438][ T3720] RIP: 0010:debug_print_object+0x16e/0x250 [ 312.778900][ T3720] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 60 f3 48 8a 4c 89 ee 48 c7 c7 00 e7 48 8a e8 9f 21 39 05 <0f> 0b 83 05 35 43 dd 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 312.793259][ T3720] RSP: 0018:ffffc900030af920 EFLAGS: 00010086 [ 312.798014][ T3720] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 312.804621][ T3720] RDX: ffff8880767d6200 RSI: ffffffff81611ee8 RDI: fffff52000615f16 [ 312.810714][ T3720] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 312.816628][ T3720] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff89eeec60 [ 312.823922][ T3720] R13: ffffffff8a48edc0 R14: ffffffff816a50a0 R15: 1ffff92000615f2f [ 312.831242][ T3720] FS: 0000000000000000(0000) GS:ffff88802ca00000(0000) knlGS:0000000000000000 [ 312.838879][ T3720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.844435][ T3720] CR2: 0000000020170000 CR3: 0000000049298000 CR4: 0000000000152ee0 [ 312.850821][ T3720] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 312.858256][ T3720] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 312.865593][ T3720] Call Trace: [ 312.868408][ T3720] [ 312.871067][ T3720] ? do_raw_spin_unlock+0x171/0x230 [ 312.875441][ T3720] debug_object_assert_init+0x1f4/0x2e0 [ 312.879538][ T3720] ? debug_object_init_on_stack+0x20/0x20 [ 312.883682][ T3720] ? __flush_work+0x8eb/0xb10 [ 312.887308][ T3720] ? rwlock_bug.part.0+0x90/0x90 [ 312.891041][ T3720] ? _raw_spin_unlock_irq+0x1f/0x40 [ 312.895104][ T3720] ? _raw_spin_unlock_irq+0x1f/0x40 [ 312.898829][ T3720] del_timer+0x6d/0x110 [ 312.901925][ T3720] ? detach_if_pending+0x480/0x480 [ 312.905597][ T3720] ? try_to_grab_pending+0xbd/0xd0 [ 312.909267][ T3720] ? lockdep_hardirqs_off+0x90/0xd0 [ 312.913878][ T3720] try_to_grab_pending+0x6d/0xd0 [ 312.918667][ T3720] __cancel_work_timer+0xa6/0x570 [ 312.923527][ T3720] ? cancel_delayed_work+0x20/0x20 [ 312.928539][ T3720] ? lock_downgrade+0x6e0/0x6e0 [ 312.932760][ T3720] ? lockdep_hardirqs_on+0x79/0x100 [ 312.937622][ T3720] hci_dev_close_sync+0xc37/0x1130 [ 312.942348][ T3720] ? hci_dev_open_sync+0x2190/0x2190 [ 312.946866][ T3720] ? lock_downgrade+0x6e0/0x6e0 [ 312.950978][ T3720] ? do_raw_spin_lock+0x120/0x2a0 [ 312.955600][ T3720] hci_dev_do_close+0x2d/0x70 [ 312.960215][ T3720] hci_error_reset+0x96/0x130 [ 312.964685][ T3720] process_one_work+0x991/0x1610 [ 312.969480][ T3720] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 312.974737][ T3720] ? rwlock_bug.part.0+0x90/0x90 [ 312.980184][ T3720] ? _raw_spin_lock_irq+0x41/0x50 [ 312.985228][ T3720] worker_thread+0x665/0x1080 [ 312.990118][ T3720] ? __kthread_parkme+0x15f/0x220 [ 312.995238][ T3720] ? process_one_work+0x1610/0x1610 [ 313.000065][ T3720] kthread+0x2e4/0x3a0 [ 313.003214][ T3720] ? kthread_complete_and_exit+0x40/0x40 [ 313.008415][ T3720] ret_from_fork+0x1f/0x30 [ 313.011997][ T3720] [ 313.015099][ T3720] Kernel panic - not syncing: panic_on_warn set ... [ 313.021253][ T3720] CPU: 2 PID: 3720 Comm: kworker/u19:8 Not tainted 6.0.0-rc2-syzkaller-00248-ge022620b5d05 #0 [ 313.031508][ T3720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 313.041154][ T3720] Workqueue: hci1 hci_error_reset [ 313.046588][ T3720] Call Trace: [ 313.050032][ T3720] [ 313.053027][ T3720] dump_stack_lvl+0xcd/0x134 [ 313.057260][ T3720] panic+0x2c8/0x627 [ 313.060219][ T3720] ? panic_print_sys_info.part.0+0x10b/0x10b [ 313.065001][ T3720] ? __warn.cold+0x248/0x2c4 [ 313.068690][ T3720] ? debug_print_object+0x16e/0x250 [ 313.072461][ T3720] __warn.cold+0x259/0x2c4 [ 313.075700][ T3720] ? __wake_up_klogd.part.0+0x99/0xf0 [ 313.079764][ T3720] ? debug_print_object+0x16e/0x250 [ 313.084093][ T3720] report_bug+0x1bc/0x210 [ 313.088270][ T3720] handle_bug+0x3c/0x60 [ 313.092402][ T3720] exc_invalid_op+0x14/0x40 [ 313.096929][ T3720] asm_exc_invalid_op+0x16/0x20 [ 313.101488][ T3720] RIP: 0010:debug_print_object+0x16e/0x250 [ 313.106963][ T3720] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd 60 f3 48 8a 4c 89 ee 48 c7 c7 00 e7 48 8a e8 9f 21 39 05 <0f> 0b 83 05 35 43 dd 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 313.122312][ T3720] RSP: 0018:ffffc900030af920 EFLAGS: 00010086 [ 313.128063][ T3720] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 313.134710][ T3720] RDX: ffff8880767d6200 RSI: ffffffff81611ee8 RDI: fffff52000615f16 [ 313.140679][ T3720] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 313.146940][ T3720] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff89eeec60 [ 313.153995][ T3720] R13: ffffffff8a48edc0 R14: ffffffff816a50a0 R15: 1ffff92000615f2f [ 313.160386][ T3720] ? calc_wheel_index+0x3d0/0x3d0 [ 313.164181][ T3720] ? vprintk+0x88/0x90 [ 313.167248][ T3720] ? do_raw_spin_unlock+0x171/0x230 [ 313.171109][ T3720] debug_object_assert_init+0x1f4/0x2e0 [ 313.174936][ T3720] ? debug_object_init_on_stack+0x20/0x20 [ 313.179310][ T3720] ? __flush_work+0x8eb/0xb10 [ 313.182781][ T3720] ? rwlock_bug.part.0+0x90/0x90 [ 313.186829][ T3720] ? _raw_spin_unlock_irq+0x1f/0x40 [ 313.190914][ T3720] ? _raw_spin_unlock_irq+0x1f/0x40 [ 313.194770][ T3720] del_timer+0x6d/0x110 [ 313.198276][ T3720] ? detach_if_pending+0x480/0x480 [ 313.202636][ T3720] ? try_to_grab_pending+0xbd/0xd0 [ 313.207004][ T3720] ? lockdep_hardirqs_off+0x90/0xd0 [ 313.211569][ T3720] try_to_grab_pending+0x6d/0xd0 [ 313.215178][ T3720] __cancel_work_timer+0xa6/0x570 [ 313.219357][ T3720] ? cancel_delayed_work+0x20/0x20 [ 313.223827][ T3720] ? lock_downgrade+0x6e0/0x6e0 [ 313.228146][ T3720] ? lockdep_hardirqs_on+0x79/0x100 [ 313.233765][ T3720] hci_dev_close_sync+0xc37/0x1130 [ 313.238973][ T3720] ? hci_dev_open_sync+0x2190/0x2190 [ 313.243922][ T3720] ? lock_downgrade+0x6e0/0x6e0 [ 313.248801][ T3720] ? do_raw_spin_lock+0x120/0x2a0 [ 313.253580][ T3720] hci_dev_do_close+0x2d/0x70 [ 313.257657][ T3720] hci_error_reset+0x96/0x130 [ 313.262911][ T3720] process_one_work+0x991/0x1610 [ 313.268442][ T3720] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 313.274213][ T3720] ? rwlock_bug.part.0+0x90/0x90 [ 313.279037][ T3720] ? _raw_spin_lock_irq+0x41/0x50 [ 313.283722][ T3720] worker_thread+0x665/0x1080 [ 313.288231][ T3720] ? __kthread_parkme+0x15f/0x220 [ 313.293026][ T3720] ? process_one_work+0x1610/0x1610 [ 313.298037][ T3720] kthread+0x2e4/0x3a0 [ 313.302038][ T3720] ? kthread_complete_and_exit+0x40/0x40 [ 313.307854][ T3720] ret_from_fork+0x1f/0x30 [ 313.312127][ T3720] [ 313.316858][ T3720] Kernel Offset: disabled [ 313.321382][ T3720] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:16:14 Registers: info registers vcpu 0 RAX=000000000010e931 RBX=ffffffff8bcbc980 RCX=ffffffff897f39e5 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff8bc07e18 R8 =0000000000000001 R9 =ffff88802c834c4b R10=ffffed1005906989 R11=0000000000000000 R12=fffffbfff1797930 R13=0000000000000000 R14=ffffffff8dddf4d0 R15=0000000000000000 RIP=ffffffff8982401b RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020127000 CR3=00000000767df000 CR4=00152ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffe8ffada0be20 RCX=0000000000000000 RDX=ffff88801528a000 RSI=ffffffff81708591 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900008e7948 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=fffff91ff5b417c5 R13=0000000000000002 R14=dffffc0000000000 R15=0000000000000001 RIP=ffffffff81708593 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbc1bf10d9f CR3=000000000bc8e000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00234423436964696d2f646e732f7665 XMM02=00007f1eb01717e000007f1eb01717c0 XMM03=00007f1eb01717c800007f1eb01717c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84612b21 RDI=ffffffff914810c0 RBP=ffffffff91481080 RSP=ffffc900030af2c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff84612ac0 R15=0000000000000000 RIP=ffffffff84612b4b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020170000 CR3=0000000049298000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f7080b717c000007f7080b717c8 XMM02=00007f7080b717e000007f7080b717c0 XMM03=00007f7080b717c800007f7080b717c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000080000001 RBX=ffffc90003fc7a38 RCX=0000000080000001 RDX=0000000000001000 RSI=ffffffff81b729e5 RDI=ffffc90003fc7a38 RBP=0000000000000002 RSP=ffffc90003fc7720 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000000 R12=ffffea0001bae9c8 R13=ffffea0001bae9c0 R14=ffffea0001bae9c0 R15=ffff888044af3a20 RIP=ffffffff817b3a0d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33023000 CR3=00000000760d1000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000