last executing test programs: 19m33.412074965s ago: executing program 2 (id=1108): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f000023a000/0x4000)=nil, 0x4000, 0x64) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f00000010c0)) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') 19m31.612033292s ago: executing program 2 (id=1114): syz_open_dev$sg(&(0x7f0000000100), 0xffff0000, 0x0) io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="f3420faece66b884000f00d8410fc76980c7442400ee000000c744240200000000ff1c2466baa100ecf2c16e002a48b8ed000000000000000f23d00f21f835200000000f23f80f08b9800000c00f3235000100000f300f13ab09000000", 0x5d}], 0x1, 0xc, 0x0, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000240)=ANY=[], 0x10) mmap(&(0x7f0000066000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) 19m29.465409873s ago: executing program 2 (id=1120): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_getscheduler(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x894a, &(0x7f0000000380)={'sit0\x00', 0x0}) unshare(0x400) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) io_setup(0x4005, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000480)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x11, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 19m27.051642406s ago: executing program 2 (id=1125): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000"], 0x0, 0x96}, 0x28) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x175) close(r0) r1 = fanotify_init(0x12, 0x1000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000640)='coredump_filter\x00') writev(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) write$binfmt_script(r6, &(0x7f0000000680)={'#! ', './file0', [{0x20, '/dev/cpu/\x05\x00\x00\x00r\x00'}, {0x20, '\x00\xff\x00'}], 0xa, "024662a339bbc4b2f61c94431467419a3e445c6ee0fe657fac31a851c4c5d20a21db6a8cc66cd2824a8f87ffed6853d3271d15759c037fac2d7b199db2fafc4254e5c99a9c67587005b61bbd52357b42e8352b566f595aeef44e740e3f8d2d56e85302e230bd2720439a433d1627158bd269ed0789fe4ea178f29313ac22b8f07aee5f5bf84df125fb1c0f438bc637a32af0df948f8a49923c7520af43abf23dc7e54baa55eb312942694642ef9519d358572b79828ecdd8d72dd3113fd807fa4d73bb6cd96be4b07d691a8c94bbf94a7c498ce208e1dd7736447928c19eb104d20a5d9cff9d8459bbeaa2388d5563ba642c47c464dec728c2ad59e8cfc68192819ba2ee2c8c8e74044234d70c9a264c7271840ac43850e753080000008a05121f1e275361faedff0d1af912f459690eb17424aa6b9c594678c75f9c0db6039459a0431bd241fadf6e09ed32094024ed10db42079613e90897879bb17a8f71787035674d"}, 0x183) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 19m25.096368867s ago: executing program 2 (id=1128): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r6, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9e", 0x78}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001040)="39e6f0f5240525bf127de94fe5cfc0b0f2c98c4ac8bf0568e948e0274b0445d03a56f1bfe147fb8ac1da60b16f07dbe40e90d68b4619d12165154b679949da907d460d298e92e0d24077e89d302255e0a9626f61e6dc304713126dd04ca5e168c8f7894d2d189c22945826101c5199f90c3734146364f2195120530ab5e42614a3cb5651b1fc7b17d61955840b5c9adbeffa334d38da282e42b01ea9d6b5a7", 0x9f}, {&(0x7f0000001100)}, {&(0x7f0000001200)="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", 0x35f}], 0x3, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8004}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x40}}, {{&(0x7f0000002440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0xc054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 19m23.772863253s ago: executing program 2 (id=1131): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x600540, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x4, 0x0, 0x3}) inotify_init() ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000480)) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 19m6.916056495s ago: executing program 32 (id=1131): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x600540, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x4, 0x0, 0x3}) inotify_init() ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000480)) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 13.450093073s ago: executing program 1 (id=5269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_rr_get_interval(0x0, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x80) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4000, @remote}, {0x2, 0x200, @multicast2}, {0x2, 0x4e20, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000000000000}) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 13.297488182s ago: executing program 3 (id=5270): socket$packet(0x11, 0x2, 0x300) socket(0x40000000015, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000280), 0x80) socket$phonet(0x23, 0x2, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 11.572159295s ago: executing program 1 (id=5273): syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0xa, 0x2000000, 0x0, 0x0, 0xfffffffc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 11.109616333s ago: executing program 3 (id=5275): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x3, 0x7, 0x0, 0x1}, 0x50) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) syz_open_dev$video(&(0x7f0000000080), 0xfffffffffffffc01, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000000)='./file0\x00', 0xca1c0, 0x104) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a00000005000000420000003e"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, 0x0}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x2, 0x4}}, 0xe) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 10.315375987s ago: executing program 3 (id=5279): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff}, 0x76e0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 9.545039137s ago: executing program 3 (id=5280): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x375040, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r1}) 9.134849518s ago: executing program 0 (id=5282): fanotify_init(0x4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 8.180615372s ago: executing program 5 (id=5284): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000206010300000000000000000000000037077a325ce1a00900020073797a3000000000050005"], 0x44}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624", 0x36}, {0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada1", 0x2d}, {0x0}], 0x5, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.854062577s ago: executing program 0 (id=5286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000040) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) getsockopt(r4, 0x111, 0xfffffffd, 0x0, 0x0) 7.751801048s ago: executing program 5 (id=5287): socket(0x16, 0x4, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 7.528907829s ago: executing program 1 (id=5288): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 7.187673394s ago: executing program 4 (id=5289): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000011000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e02, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0801000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008000800080000100000"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000780)={@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0xa, 0xfa, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x0, 0x3}) io_uring_enter(r6, 0x6a8a, 0xffefffff, 0x21, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) mknod$loop(0x0, 0xfff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) creat(&(0x7f0000000100)='./file2\x00', 0xd931d3864d39dcc4) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b01660cfb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0x3, 0x5479, 0x2000001035, 0x200000000006, 0x0, 0x5, 0x3, 0x892, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.884121889s ago: executing program 0 (id=5290): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, 0x0, 0x40008) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000740)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) shutdown(r0, 0x1) 5.549532135s ago: executing program 1 (id=5291): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f00002d6000/0xe000)=nil, 0xe000, 0xc, 0x11, r3, 0xffff9000) 5.547711606s ago: executing program 4 (id=5292): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) userfaultfd(0x80001) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00000000c0)) r1 = gettid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) read(r2, &(0x7f0000000100)=""/41, 0x29) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.505459188s ago: executing program 5 (id=5293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) accept4(r2, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000500), 0x2002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000039a000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r8, 0x40096100, &(0x7f0000000340)={{}, 0x40}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 5.448128758s ago: executing program 3 (id=5294): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) read$nci(r0, 0x0, 0x0) read$nci(r0, 0x0, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1}}, 0x9) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, 0x0, 0x0) write$nci(r0, 0x0, 0x7) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x100004, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x5) 5.34460513s ago: executing program 4 (id=5295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x674, 0x4080800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 4.100425202s ago: executing program 4 (id=5296): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000c80)=ANY=[@ANYBLOB="00000c040000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = gettid() wait4(r1, 0x0, 0x40000000, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB='@\b$\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.07625118s ago: executing program 0 (id=5297): fsopen(0x0, 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, 0x0, 0x12060) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) fcntl$setlease(r3, 0x400, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 3.4909682s ago: executing program 3 (id=5298): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 3.298815407s ago: executing program 5 (id=5299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) accept4(r2, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, 0x0, &(0x7f0000000000)=r1}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000500), 0x2002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000039a000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r8, 0x40096100, &(0x7f0000000340)={{}, 0x40}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.240110294s ago: executing program 0 (id=5300): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x28) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 2.889846727s ago: executing program 0 (id=5301): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x93a162fb1f423eb1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) socket$inet6_sctp(0xa, 0x5, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.733267046s ago: executing program 1 (id=5302): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x821) 2.167173375s ago: executing program 4 (id=5303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(0x0, 0x80880) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xa85, 0xf) 1.915228593s ago: executing program 5 (id=5304): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000011000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e02, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0801000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008000800080000100000"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000780)={@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0xa, 0xfa, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x0, 0x3}) io_uring_enter(r6, 0x6a8a, 0xffefffff, 0x21, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) mknod$loop(0x0, 0xfff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) creat(&(0x7f0000000100)='./file2\x00', 0xd931d3864d39dcc4) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b01660cfb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0x3, 0x5479, 0x2000001035, 0x200000000006, 0x0, 0x5, 0x3, 0x892, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 339.54215ms ago: executing program 4 (id=5305): ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_open_dev$evdev(0x0, 0x20000, 0x0) ioctl$I2C_FUNCS(r0, 0x705, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) listen(0xffffffffffffffff, 0xfff) socket$nl_audit(0x10, 0x3, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 93.467834ms ago: executing program 1 (id=5306): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000280)=0x400) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xca83, 0xfffffffd, 0xdeac, 0x38000, 0x7e, "1039db8d79bea18f23015ae9ae8501313cf366"}) 0s ago: executing program 5 (id=5307): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): syz.1.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1645.652291][ T29] audit: type=1400 audit(1560.838:8863): avc: denied { bpf } for pid=23422 comm="syz.1.4501" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1645.725764][ T29] audit: type=1400 audit(1560.857:8864): avc: denied { create } for pid=23422 comm="syz.1.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1645.820235][ T29] audit: type=1400 audit(1560.866:8865): avc: denied { write } for pid=23422 comm="syz.1.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1645.850615][ T29] audit: type=1400 audit(1561.540:8866): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1645.878266][ T29] audit: type=1400 audit(1561.540:8867): avc: denied { read write open } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1645.920087][ T29] audit: type=1400 audit(1561.540:8868): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1646.163726][T23440] siw: device registration error -23 [ 1646.308764][ T29] audit: type=1400 audit(1561.643:8869): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1646.339477][ T29] audit: type=1400 audit(1561.643:8870): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1646.804201][T23452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4509'. [ 1646.876607][T23452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4509'. [ 1647.262760][T20855] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1647.683469][T23461] netlink: 'syz.3.4511': attribute type 39 has an invalid length. [ 1650.542716][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 1650.542736][ T29] audit: type=1400 audit(1566.200:9075): avc: denied { module_request } for pid=23497 comm="syz.5.4526" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1650.620110][ T29] audit: type=1400 audit(1566.247:9076): avc: denied { create } for pid=23496 comm="syz.3.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1650.660124][T23503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4525'. [ 1650.724339][ T29] audit: type=1400 audit(1566.266:9077): avc: denied { create } for pid=23496 comm="syz.3.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1650.783391][T23503] --map-set only usable from mangle table [ 1650.802419][ T29] audit: type=1400 audit(1566.275:9078): avc: denied { ioctl } for pid=23496 comm="syz.3.4527" path="socket:[76485]" dev="sockfs" ino=76485 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1650.869574][ T29] audit: type=1400 audit(1566.275:9079): avc: denied { bind } for pid=23496 comm="syz.3.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1650.900135][ T29] audit: type=1400 audit(1566.294:9080): avc: denied { bind } for pid=23496 comm="syz.3.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1650.942983][ T29] audit: type=1400 audit(1566.313:9081): avc: denied { create } for pid=23494 comm="syz.1.4525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1650.994729][ T29] audit: type=1400 audit(1566.313:9082): avc: denied { ioctl } for pid=23494 comm="syz.1.4525" path="socket:[76914]" dev="sockfs" ino=76914 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1651.024640][ T29] audit: type=1400 audit(1566.331:9083): avc: denied { create } for pid=23494 comm="syz.1.4525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1651.063816][ T29] audit: type=1400 audit(1566.341:9084): avc: denied { setopt } for pid=23494 comm="syz.1.4525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1651.102913][T23503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4525'. [ 1651.762937][T23518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4530'. [ 1651.846321][T23518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4530'. [ 1652.421736][T23526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4535'. [ 1652.746809][T23533] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4536'. [ 1653.657404][T23543] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4540'. [ 1654.414601][T23557] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4542'. [ 1654.550938][T23556] syzkaller1: entered promiscuous mode [ 1654.578307][T23556] syzkaller1: entered allmulticast mode [ 1655.885028][T23577] fuse: fd is not a fuse device [ 1655.891030][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 1655.891048][ T29] audit: type=1400 audit(1571.207:9263): avc: denied { read write } for pid=23574 comm="syz.1.4548" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1655.905405][T23578] xt_hashlimit: size too large, truncated to 1048576 [ 1655.999563][ T985] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1656.056762][ T29] audit: type=1400 audit(1571.216:9264): avc: denied { create } for pid=23576 comm="syz.5.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1656.085422][ T985] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1656.163475][ T29] audit: type=1400 audit(1571.216:9265): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1656.272368][T23585] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4551'. [ 1656.286398][ T29] audit: type=1400 audit(1571.216:9266): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1656.300037][T23585] bridge0: port 1(syz_tun) entered disabled state [ 1656.404119][ T29] audit: type=1400 audit(1571.226:9267): avc: denied { setopt } for pid=23576 comm="syz.5.4549" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1656.474037][ T29] audit: type=1400 audit(1571.254:9268): avc: denied { read write open } for pid=23574 comm="syz.1.4548" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1656.565849][ T29] audit: type=1400 audit(1571.263:9269): avc: denied { ioctl } for pid=23574 comm="syz.1.4548" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1656.702118][ T29] audit: type=1400 audit(1571.282:9270): avc: denied { execmem } for pid=23574 comm="syz.1.4548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1656.792686][T23593] --map-set only usable from mangle table [ 1656.835226][ T29] audit: type=1400 audit(1571.310:9271): avc: denied { create } for pid=23576 comm="syz.5.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1656.896092][T23592] hid-generic 0000:0000:0000.003B: pid 23592 passed too short report [ 1656.924800][ T29] audit: type=1400 audit(1571.319:9272): avc: denied { bind } for pid=23576 comm="syz.5.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1657.059136][T23593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4552'. [ 1657.598901][T10822] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1657.769245][T10822] usb 4-1: Using ep0 maxpacket: 16 [ 1657.834458][T10822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.873607][T10822] usb 4-1: config 0 has no interfaces? [ 1657.994340][T10822] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1658.006109][T10822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.026052][T10822] usb 4-1: Product: syz [ 1658.034496][T10822] usb 4-1: Manufacturer: syz [ 1658.067103][T10822] usb 4-1: SerialNumber: syz [ 1658.160793][T23611] netlink: 'syz.0.4558': attribute type 39 has an invalid length. [ 1658.395277][T10822] usb 4-1: config 0 descriptor?? [ 1659.146676][T10822] usb 4-1: USB disconnect, device number 60 [ 1659.605277][T23622] kvm: apic: phys broadcast and lowest prio [ 1660.884771][T23644] siw: device registration error -23 [ 1661.135918][T23648] siw: device registration error -23 [ 1661.243027][T23654] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4573'. [ 1661.277049][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 1661.277067][ T29] audit: type=1400 audit(1576.251:9506): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1661.315579][ T29] audit: type=1400 audit(1576.251:9507): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1661.344075][ T29] audit: type=1400 audit(1576.251:9508): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1661.480143][ T29] audit: type=1400 audit(1576.354:9509): avc: denied { allowed } for pid=23650 comm="syz.0.4573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1661.522526][ T29] audit: type=1400 audit(1576.354:9510): avc: denied { sqpoll } for pid=23650 comm="syz.0.4573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1661.561639][ T29] audit: type=1400 audit(1576.363:9511): avc: denied { create } for pid=23650 comm="syz.0.4573" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1661.588202][T23657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4572'. [ 1661.633692][ T29] audit: type=1400 audit(1576.363:9512): avc: denied { execute } for pid=23650 comm="syz.0.4573" name="file0" dev="tmpfs" ino=5399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1661.699392][ T29] audit: type=1400 audit(1576.363:9513): avc: denied { execute_no_trans } for pid=23650 comm="syz.0.4573" path="/1000/file0" dev="tmpfs" ino=5399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1661.763909][ T29] audit: type=1400 audit(1576.382:9514): avc: denied { create } for pid=23647 comm="syz.5.4572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1661.837184][ T29] audit: type=1400 audit(1576.391:9515): avc: denied { ioctl } for pid=23647 comm="syz.5.4572" path="socket:[77203]" dev="sockfs" ino=77203 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1662.093704][T23663] dummy0: entered promiscuous mode [ 1662.132957][T23663] dummy0: left promiscuous mode [ 1662.200982][T23668] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4578'. [ 1662.579282][ T985] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1662.678397][T23674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4581'. [ 1663.231750][ T985] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1663.254816][ T985] usb 2-1: not running at top speed; connect to a high speed hub [ 1663.280491][ T985] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1663.304020][ T985] usb 2-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1663.330194][ T985] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1663.358321][ T985] usb 2-1: string descriptor 0 read error: -22 [ 1663.366023][ T985] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.40 [ 1663.378374][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.411760][T23670] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1663.803599][ T68] Bluetooth: hci1: Frame reassembly failed (-84) [ 1664.038023][ T985] uclogic 0003:2179:0077.003C: interface is invalid, ignoring [ 1664.227227][ T985] usb 2-1: USB disconnect, device number 39 [ 1664.616013][T23696] 9p: Bad value for 'rfdno' [ 1665.420763][T23708] siw: device registration error -23 [ 1665.987612][T20855] Bluetooth: hci1: command 0x1003 tx timeout [ 1665.999822][T11492] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1666.632976][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 1666.632994][ T29] audit: type=1400 audit(1581.267:9752): avc: denied { execute } for pid=23729 comm="syz.4.4602" name="file0" dev="tmpfs" ino=5202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1666.755185][ T29] audit: type=1400 audit(1581.267:9753): avc: denied { execute_no_trans } for pid=23729 comm="syz.4.4602" path="/948/file0" dev="tmpfs" ino=5202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1666.844247][ T29] audit: type=1400 audit(1581.295:9754): avc: denied { name_bind } for pid=23728 comm="syz.3.4601" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1666.893138][ T29] audit: type=1400 audit(1581.295:9755): avc: denied { node_bind } for pid=23728 comm="syz.3.4601" saddr=::ffff:172.20.20.34 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1666.943767][ T29] audit: type=1400 audit(1581.482:9756): avc: denied { prog_load } for pid=23735 comm="syz.4.4604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1667.025059][ T29] audit: type=1400 audit(1581.482:9757): avc: denied { bpf } for pid=23735 comm="syz.4.4604" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1667.097472][ T29] audit: type=1400 audit(1581.482:9758): avc: denied { perfmon } for pid=23735 comm="syz.4.4604" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1667.164105][ T29] audit: type=1400 audit(1581.491:9759): avc: denied { prog_load } for pid=23735 comm="syz.4.4604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1667.200837][ T29] audit: type=1400 audit(1581.491:9760): avc: denied { perfmon } for pid=23735 comm="syz.4.4604" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1667.228010][ T29] audit: type=1400 audit(1581.491:9761): avc: denied { perfmon } for pid=23735 comm="syz.4.4604" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1668.647504][ T985] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1668.839774][ T985] usb 2-1: Using ep0 maxpacket: 16 [ 1668.888257][ T985] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1668.930672][ T985] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1669.088494][ T985] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1669.108809][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.137484][ T985] usb 2-1: Product: syz [ 1669.153994][ T985] usb 2-1: Manufacturer: syz [ 1669.173628][ T985] usb 2-1: SerialNumber: syz [ 1669.500353][ T985] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1669.537280][ T985] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1669.785768][T23783] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4620'. [ 1669.952156][ T985] usb 2-1: 2:1 : bogus bTerminalLink 6 [ 1670.103367][T23787] siw: device registration error -23 [ 1670.314491][ T985] usb 2-1: USB disconnect, device number 40 [ 1670.497036][T18317] udevd[18317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1671.345951][T23801] netlink: 'syz.5.4624': attribute type 39 has an invalid length. [ 1671.986346][ T29] kauditd_printk_skb: 678 callbacks suppressed [ 1671.986362][ T29] audit: type=1400 audit(1586.273:10440): avc: denied { write } for pid=23753 comm="syz.3.4608" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1672.045044][ T29] audit: type=1400 audit(1586.273:10441): avc: denied { write } for pid=23753 comm="syz.3.4608" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1672.212963][ T29] audit: type=1400 audit(1586.311:10442): avc: denied { write } for pid=23753 comm="syz.3.4608" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1672.238893][ T29] audit: type=1400 audit(1586.320:10443): avc: denied { write } for pid=23753 comm="syz.3.4608" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1672.263643][ T29] audit: type=1400 audit(1586.320:10444): avc: denied { write } for pid=23753 comm="syz.3.4608" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1672.320184][ T29] audit: type=1400 audit(1586.395:10445): avc: denied { execmem } for pid=23802 comm="syz.5.4628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1672.424548][T23808] xt_hashlimit: size too large, truncated to 1048576 [ 1672.427470][ T29] audit: type=1400 audit(1586.479:10446): avc: denied { write } for pid=23753 comm="syz.3.4608" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1672.530194][T23754] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1672.552020][ T29] audit: type=1400 audit(1586.479:10447): avc: denied { write } for pid=23753 comm="syz.3.4608" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1672.578622][T23754] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 1674.103677][T23823] siw: device registration error -23 [ 1675.484713][T23849] siw: device registration error -23 [ 1675.980546][T23851] ubi: mtd0 is already attached to ubi31 [ 1676.566157][T23857] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4642'. [ 1676.862952][T23857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4642'. [ 1677.180614][T23875] ubi: mtd0 is already attached to ubi31 [ 1677.585656][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 1677.585668][ T29] audit: type=1400 audit(1591.514:10854): avc: denied { name_bind } for pid=23877 comm="syz.0.4650" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1677.635076][ T29] audit: type=1400 audit(1591.542:10855): avc: denied { node_bind } for pid=23877 comm="syz.0.4650" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1677.809161][ T29] audit: type=1400 audit(1591.710:10856): avc: denied { name_bind } for pid=23879 comm="syz.4.4649" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1677.854523][ T29] audit: type=1400 audit(1591.720:10857): avc: denied { node_bind } for pid=23879 comm="syz.4.4649" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1677.973524][ T29] audit: type=1400 audit(1591.869:10858): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1678.033117][ T29] audit: type=1400 audit(1591.907:10859): avc: denied { read write open } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1678.097769][ T29] audit: type=1400 audit(1591.907:10860): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1678.167240][ T29] audit: type=1400 audit(1592.057:10861): avc: denied { mounton } for pid=23882 comm="syz.1.4651" path="/832/bus" dev="tmpfs" ino=4523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1678.193602][T23883] overlayfs: failed to clone upperpath [ 1678.282439][ T29] audit: type=1400 audit(1592.159:10862): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1678.374083][ T29] audit: type=1400 audit(1592.206:10863): avc: denied { read write open } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1679.682765][T23895] siw: device registration error -23 [ 1680.010493][T23880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1680.062779][T23880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1680.175397][T23905] overlayfs: failed to clone upperpath [ 1680.801237][T18228] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1680.829467][T18228] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.847367][T18228] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1680.868555][T18228] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.869980][T23897] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 1680.903441][T18228] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1680.944736][T18228] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.974456][T18228] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1681.002797][T23897] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1681.017421][T18228] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.158248][T23918] fuse: fd is not a fuse device [ 1681.303044][T23922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4662'. [ 1682.302312][T23939] fuse: fd is not a fuse device [ 1682.657441][T23945] siw: device registration error -23 [ 1682.940504][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 1682.940522][ T29] audit: type=1400 audit(1596.520:11261): avc: denied { execute } for pid=23951 comm="syz.1.4671" path="/836/blkio.bfq.io_service_bytes" dev="tmpfs" ino=4549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1683.070041][ T29] audit: type=1400 audit(1596.642:11262): avc: denied { create } for pid=23956 comm="syz.3.4673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1683.159477][ T29] audit: type=1400 audit(1596.689:11263): avc: denied { ioctl } for pid=23956 comm="syz.3.4673" path="socket:[78519]" dev="sockfs" ino=78519 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1683.280943][ T29] audit: type=1400 audit(1596.689:11264): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1683.355096][ T29] audit: type=1400 audit(1596.689:11265): avc: denied { read write open } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1683.483005][ T29] audit: type=1400 audit(1596.689:11266): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1683.625020][ T29] audit: type=1400 audit(1596.792:11267): avc: denied { search } for pid=23950 comm="sed" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1683.692449][T23970] --map-set only usable from mangle table [ 1683.699792][ T29] audit: type=1400 audit(1596.792:11268): avc: denied { search } for pid=23950 comm="sed" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1683.740631][T23970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4675'. [ 1683.818154][ T29] audit: type=1400 audit(1596.801:11269): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1684.007377][ T29] audit: type=1400 audit(1596.801:11270): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1686.598574][T24018] --map-set only usable from mangle table [ 1686.837976][T24018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4685'. [ 1688.427592][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 1688.427610][ T29] audit: type=1400 audit(1601.667:11699): avc: denied { search } for pid=24029 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.505550][ T29] audit: type=1400 audit(1601.686:11700): avc: denied { search } for pid=24029 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.552413][ T29] audit: type=1400 audit(1601.686:11701): avc: denied { search } for pid=24029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.618691][ T29] audit: type=1400 audit(1601.686:11702): avc: denied { read open } for pid=24029 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.707466][ T29] audit: type=1400 audit(1601.686:11703): avc: denied { getattr } for pid=24029 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.824117][ T29] audit: type=1400 audit(1601.695:11704): avc: denied { search } for pid=24029 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.905760][ T29] audit: type=1400 audit(1601.695:11705): avc: denied { search } for pid=24029 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1688.980817][ T29] audit: type=1400 audit(1601.695:11706): avc: denied { search } for pid=24029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.038838][ T29] audit: type=1400 audit(1601.695:11707): avc: denied { search } for pid=24029 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.097852][ T29] audit: type=1400 audit(1601.705:11708): avc: denied { search } for pid=24029 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1689.709169][T24061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4697'. [ 1689.775789][T24061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4697'. [ 1689.797213][T24061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4697'. [ 1689.821722][T24061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4697'. [ 1693.800898][ T29] kauditd_printk_skb: 457 callbacks suppressed [ 1693.800916][ T29] audit: type=1400 audit(1606.683:12166): avc: denied { prog_load } for pid=24129 comm="syz.3.4718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1693.883586][ T29] audit: type=1400 audit(1606.711:12167): avc: denied { bpf } for pid=24129 comm="syz.3.4718" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1693.961589][ T29] audit: type=1400 audit(1606.711:12168): avc: denied { perfmon } for pid=24129 comm="syz.3.4718" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1694.042305][ T29] audit: type=1400 audit(1606.749:12169): avc: denied { prog_load } for pid=24129 comm="syz.3.4718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1694.113075][ T29] audit: type=1400 audit(1606.749:12170): avc: denied { bpf } for pid=24129 comm="syz.3.4718" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1694.215797][T24124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.228499][ T29] audit: type=1400 audit(1606.749:12171): avc: denied { perfmon } for pid=24129 comm="syz.3.4718" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1694.286046][T24124] bond_slave_0: left promiscuous mode [ 1694.335329][ T29] audit: type=1400 audit(1606.749:12172): avc: denied { prog_load } for pid=24129 comm="syz.3.4718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1694.335907][T24124] bond_slave_1: left promiscuous mode [ 1694.485553][ T29] audit: type=1400 audit(1606.749:12173): avc: denied { perfmon } for pid=24129 comm="syz.3.4718" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1694.595929][ T29] audit: type=1400 audit(1606.758:12174): avc: denied { perfmon } for pid=24129 comm="syz.3.4718" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1694.634051][T24143] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1695.164493][T24124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1695.248727][T24143] siw: device registration error -23 [ 1695.342724][T24124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1695.677853][T24157] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4726'. [ 1695.678134][T24124] sit2: left allmulticast mode [ 1695.748549][T24160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24160 comm=syz.1.4726 [ 1695.779660][T24160] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4726'. [ 1695.817900][T23890] lo speed is unknown, defaulting to 1000 [ 1695.840211][T10867] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1695.863789][T10867] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.902980][T23890] syz2: Port: 1 Link DOWN [ 1695.916366][T10867] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1695.949286][T10867] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.063096][T24167] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4728'. [ 1696.126033][T24163] --map-set only usable from mangle table [ 1696.174769][T10867] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1696.210235][T10867] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.231641][T10867] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1696.255017][T10867] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.290649][T24163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4725'. [ 1697.407744][T24186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4736'. [ 1698.237304][T24197] siw: device registration error -23 [ 1698.793416][T24212] siw: device registration error -23 [ 1699.245008][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 1699.245025][ T29] audit: type=1400 audit(1611.783:12611): avc: denied { map_create } for pid=24215 comm="syz.0.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1699.324555][ T29] audit: type=1400 audit(1611.811:12612): avc: denied { map_create } for pid=24215 comm="syz.0.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1699.366009][ T29] audit: type=1400 audit(1611.811:12613): avc: denied { map_read map_write } for pid=24215 comm="syz.0.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1699.440803][ T29] audit: type=1400 audit(1611.821:12614): avc: denied { prog_load } for pid=24215 comm="syz.0.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1699.494489][T24225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4745'. [ 1699.536964][ T29] audit: type=1400 audit(1611.821:12615): avc: denied { bpf } for pid=24215 comm="syz.0.4743" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1699.637624][ T29] audit: type=1400 audit(1611.830:12616): avc: denied { prog_load } for pid=24215 comm="syz.0.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1699.696243][ T29] audit: type=1400 audit(1611.830:12617): avc: denied { perfmon } for pid=24215 comm="syz.0.4743" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1699.731898][ T29] audit: type=1400 audit(1611.830:12618): avc: denied { perfmon } for pid=24215 comm="syz.0.4743" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1699.756496][ T29] audit: type=1400 audit(1611.830:12619): avc: denied { perfmon } for pid=24215 comm="syz.0.4743" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1699.789539][ T29] audit: type=1400 audit(1611.839:12620): avc: denied { perfmon } for pid=24215 comm="syz.0.4743" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1699.921220][T24232] overlayfs: failed to clone upperpath [ 1700.587775][T18640] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1700.693090][T24244] fuse: fd is not a fuse device [ 1700.713893][T24243] siw: device registration error -23 [ 1700.780203][T18640] usb 4-1: Using ep0 maxpacket: 16 [ 1700.806976][T18640] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1700.826907][T18640] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1700.854512][T18640] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1700.865310][T18640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.878039][T18640] usb 4-1: Product: syz [ 1700.882252][T18640] usb 4-1: Manufacturer: syz [ 1700.890492][T18640] usb 4-1: SerialNumber: syz [ 1701.001426][T24248] netlink: 380 bytes leftover after parsing attributes in process `syz.4.4755'. [ 1701.261526][T18640] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1701.648037][T18640] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1701.858824][T24257] overlayfs: failed to clone upperpath [ 1701.901717][T18640] usb 4-1: 2:1 : bogus bTerminalLink 6 [ 1701.991521][T24258] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1702.022147][T24258] block device autoloading is deprecated and will be removed. [ 1702.270651][T18640] usb 4-1: USB disconnect, device number 61 [ 1703.163249][T24082] udevd[24082]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1703.654322][T24274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4764'. [ 1704.288133][T24285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1704.660802][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 1704.660819][ T29] audit: type=1400 audit(1616.855:12810): avc: denied { create } for pid=24289 comm="syz.4.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1704.716418][T24291] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4767'. [ 1704.755382][ T29] audit: type=1400 audit(1616.883:12811): avc: denied { prog_load } for pid=24289 comm="syz.4.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1704.788229][ T29] audit: type=1400 audit(1616.883:12812): avc: denied { bpf } for pid=24289 comm="syz.4.4767" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1704.883513][ T29] audit: type=1400 audit(1616.883:12813): avc: denied { prog_load } for pid=24289 comm="syz.4.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1705.000463][ T29] audit: type=1400 audit(1616.883:12814): avc: denied { perfmon } for pid=24289 comm="syz.4.4767" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1705.105857][ T29] audit: type=1400 audit(1616.893:12815): avc: denied { perfmon } for pid=24289 comm="syz.4.4767" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1705.289175][ T29] audit: type=1400 audit(1616.893:12816): avc: denied { perfmon } for pid=24289 comm="syz.4.4767" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1705.362957][ T29] audit: type=1400 audit(1616.893:12817): avc: denied { perfmon } for pid=24289 comm="syz.4.4767" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1705.422953][T24299] siw: device registration error -23 [ 1705.444439][ T29] audit: type=1400 audit(1616.893:12818): avc: denied { bpf } for pid=24289 comm="syz.4.4767" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1705.533600][ T29] audit: type=1400 audit(1616.902:12819): avc: denied { write } for pid=24289 comm="syz.4.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1706.912527][T24324] fuse: fd is not a fuse device [ 1708.120861][T24337] fuse: fd is not a fuse device [ 1708.371337][T24340] siw: device registration error -23 [ 1708.794510][T24354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4781'. [ 1708.867786][T24354] --map-set only usable from mangle table [ 1708.907327][T24354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4781'. [ 1709.116881][T24359] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4787'. [ 1710.079224][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 1710.079241][ T29] audit: type=1400 audit(1621.927:13010): avc: denied { prog_load } for pid=24374 comm="syz.4.4793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1710.204716][ T29] audit: type=1400 audit(1621.946:13011): avc: denied { bpf } for pid=24374 comm="syz.4.4793" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1710.227633][ T29] audit: type=1400 audit(1621.955:13012): avc: denied { execmem } for pid=24374 comm="syz.4.4793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1710.276872][ T29] audit: type=1400 audit(1622.105:13013): avc: denied { create } for pid=24373 comm="syz.1.4792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1710.733104][ T29] audit: type=1400 audit(1622.161:13014): avc: denied { read write } for pid=24373 comm="syz.1.4792" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1710.813908][ T29] audit: type=1400 audit(1622.171:13015): avc: denied { read write open } for pid=24373 comm="syz.1.4792" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1710.883657][ T29] audit: type=1400 audit(1622.171:13016): avc: denied { ioctl } for pid=24373 comm="syz.1.4792" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1710.954773][ T29] audit: type=1400 audit(1622.208:13017): avc: denied { map_create } for pid=24374 comm="syz.4.4793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1711.049371][T18640] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1711.073435][ T29] audit: type=1400 audit(1622.227:13018): avc: denied { map_create } for pid=24374 comm="syz.4.4793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1711.093316][ T29] audit: type=1400 audit(1622.227:13019): avc: denied { map_read map_write } for pid=24374 comm="syz.4.4793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1711.212040][T24384] netlink: 'syz.3.4794': attribute type 10 has an invalid length. [ 1711.225811][T24384] batadv0: left allmulticast mode [ 1711.243586][T24384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1711.265562][T24384] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1711.284618][T18640] usb 2-1: Using ep0 maxpacket: 16 [ 1711.327462][T18640] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.357939][T18640] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.377881][T18640] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1711.389818][T18640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.523117][T24392] fuse: fd is not a fuse device [ 1711.739693][T24397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1711.771368][T24397] --map-set only usable from mangle table [ 1711.867754][T24397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1711.916037][T24402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4797'. [ 1711.995955][T24402] --map-set only usable from mangle table [ 1712.051260][T24402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4797'. [ 1712.317720][T18640] mcp2221 0003:04D8:00DD.003E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1712.502895][T24405] siw: device registration error -23 [ 1713.146192][T18640] usb 2-1: USB disconnect, device number 41 [ 1713.174277][T24414] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4802'. [ 1714.126697][T24432] io-wq is not configured for unbound workers [ 1714.400648][T24440] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4812'. [ 1714.697930][T24440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4812'. [ 1714.837077][T24440] netlink: 19 bytes leftover after parsing attributes in process `syz.5.4812'. [ 1714.864393][T24440] netlink: 'syz.5.4812': attribute type 2 has an invalid length. [ 1714.892151][T24440] netlink: 'syz.5.4812': attribute type 3 has an invalid length. [ 1714.936897][T24440] netlink: 19 bytes leftover after parsing attributes in process `syz.5.4812'. [ 1715.443006][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 1715.443023][ T29] audit: type=1400 audit(1626.934:13253): avc: denied { prog_load } for pid=24456 comm="syz.5.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1715.524460][T24457] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4816'. [ 1715.543572][ T29] audit: type=1400 audit(1626.934:13254): avc: denied { bpf } for pid=24456 comm="syz.5.4816" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1715.684927][ T29] audit: type=1400 audit(1626.934:13255): avc: denied { prog_load } for pid=24456 comm="syz.5.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1715.763342][ T29] audit: type=1400 audit(1626.934:13256): avc: denied { perfmon } for pid=24456 comm="syz.5.4816" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1715.812216][ T29] audit: type=1400 audit(1626.981:13257): avc: denied { perfmon } for pid=24456 comm="syz.5.4816" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1715.888343][ T29] audit: type=1400 audit(1626.981:13258): avc: denied { perfmon } for pid=24456 comm="syz.5.4816" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1715.914752][T24466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4818'. [ 1716.067265][ T29] audit: type=1400 audit(1626.981:13259): avc: denied { perfmon } for pid=24456 comm="syz.5.4816" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1716.090667][ T29] audit: type=1400 audit(1626.981:13260): avc: denied { bpf } for pid=24456 comm="syz.5.4816" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1716.113441][ T29] audit: type=1400 audit(1626.999:13261): avc: denied { write } for pid=24456 comm="syz.5.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1716.271057][T24474] netlink: 'syz.0.4819': attribute type 39 has an invalid length. [ 1716.608559][ T29] audit: type=1400 audit(1627.009:13262): avc: denied { nlmsg_write } for pid=24456 comm="syz.5.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1717.429985][T23890] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1717.638807][T23890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 25665, setting to 1024 [ 1717.674324][T23890] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1717.693950][T24492] siw: device registration error -23 [ 1717.708172][T23890] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1717.754353][T23890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1717.786489][T23890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1717.806409][T24495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4830'. [ 1717.807563][T23890] usb 4-1: Product: syz [ 1717.845512][T23890] usb 4-1: Manufacturer: syz [ 1717.862734][T23890] usb 4-1: SerialNumber: syz [ 1717.904993][T24485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1718.265567][T24504] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4835'. [ 1718.290446][T23890] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1718.658360][ C0] usblp0: nonzero write bulk status received: -71 [ 1718.724315][T24513] siw: device registration error -23 [ 1718.766712][ T9] usb 4-1: USB disconnect, device number 62 [ 1718.801978][ T9] usblp0: removed [ 1719.038467][T24522] netlink: 'syz.1.4836': attribute type 39 has an invalid length. [ 1720.164620][T18640] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1720.760626][T18640] usb 2-1: Using ep0 maxpacket: 8 [ 1720.802472][T18640] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1720.810875][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 1720.810891][ T29] audit: type=1400 audit(1631.950:13635): avc: denied { ioctl } for pid=24530 comm="syz.1.4843" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1720.854061][T18640] usb 2-1: config 179 has no interface number 0 [ 1720.867394][T18640] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1720.880543][T18640] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1720.892216][ T29] audit: type=1400 audit(1631.996:13636): avc: denied { ioctl } for pid=24530 comm="syz.1.4843" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1720.919358][T18640] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1720.963871][T18640] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1721.001051][ T29] audit: type=1400 audit(1632.025:13637): avc: denied { unlink } for pid=5811 comm="syz-executor" name="file1" dev="tmpfs" ino=5736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1721.036028][T18640] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1721.082688][T18640] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1721.092727][ T29] audit: type=1400 audit(1632.137:13638): avc: denied { create } for pid=24544 comm="syz.5.4848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1721.116532][T24545] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4848'. [ 1721.128862][T18640] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1721.146802][T18640] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.168614][ T29] audit: type=1400 audit(1632.165:13639): avc: denied { prog_load } for pid=24544 comm="syz.5.4848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1721.267931][ T29] audit: type=1400 audit(1632.174:13640): avc: denied { bpf } for pid=24544 comm="syz.5.4848" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1721.395859][ T29] audit: type=1400 audit(1632.193:13641): avc: denied { prog_load } for pid=24544 comm="syz.5.4848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1721.469803][T18640] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input40 [ 1721.518165][ T29] audit: type=1400 audit(1632.193:13642): avc: denied { perfmon } for pid=24544 comm="syz.5.4848" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1721.673648][ T29] audit: type=1400 audit(1632.202:13643): avc: denied { perfmon } for pid=24544 comm="syz.5.4848" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1721.749261][ T5171] input input40: unable to receive magic message: -110 [ 1721.788221][ T29] audit: type=1400 audit(1632.202:13644): avc: denied { perfmon } for pid=24544 comm="syz.5.4848" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1721.925631][ T5171] input input40: unable to receive magic message: -32 [ 1722.012770][T18640] usb 2-1: USB disconnect, device number 42 [ 1722.018849][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1722.019273][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1722.210010][T24565] fuse: fd is not a fuse device [ 1722.597951][T24569] netlink: 'syz.5.4853': attribute type 39 has an invalid length. [ 1723.163533][T24574] siw: device registration error -23 [ 1723.565242][T24580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4856'. [ 1723.661905][T24584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4856'. [ 1726.186621][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 1726.186639][ T29] audit: type=1400 audit(1636.994:13859): avc: denied { create } for pid=24613 comm="syz.4.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1726.314334][ T29] audit: type=1400 audit(1637.003:13860): avc: denied { create } for pid=24613 comm="syz.4.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1726.428314][ T29] audit: type=1400 audit(1637.012:13861): avc: denied { shutdown } for pid=24613 comm="syz.4.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1726.519482][ T29] audit: type=1400 audit(1637.012:13862): avc: denied { getopt } for pid=24613 comm="syz.4.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1726.612139][ T29] audit: type=1400 audit(1637.012:13863): avc: denied { connect } for pid=24613 comm="syz.4.4869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1726.808495][T24627] netlink: 'syz.0.4870': attribute type 39 has an invalid length. [ 1727.135743][ T29] audit: type=1400 audit(1637.022:13864): avc: denied { name_connect } for pid=24613 comm="syz.4.4869" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1727.157670][ T29] audit: type=1400 audit(1637.031:13865): avc: denied { getopt } for pid=24613 comm="syz.4.4869" lport=35727 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1727.196678][ T29] audit: type=1400 audit(1637.031:13866): avc: denied { getopt } for pid=24613 comm="syz.4.4869" lport=35727 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1727.241180][T24626] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1727.247750][T24626] audit: audit_lost=41 audit_rate_limit=0 audit_backlog_limit=64 [ 1727.718941][T24630] netlink: 'syz.1.4874': attribute type 7 has an invalid length. [ 1730.159531][T24673] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4888'. [ 1731.150500][T24686] siw: device registration error -23 [ 1731.418833][T24691] bridge0: port 1(syz_tun) entered blocking state [ 1731.425449][T24691] bridge0: port 1(syz_tun) entered listening state [ 1731.461161][T24691] bridge0: left promiscuous mode [ 1731.476706][T24691] bridge0: entered promiscuous mode [ 1731.499957][T24693] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4896'. [ 1731.543778][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 1731.543794][ T29] audit: type=1400 audit(1641.998:14196): avc: denied { allowed } for pid=24692 comm="syz.5.4896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1731.637326][ T29] audit: type=1400 audit(1641.998:14197): avc: denied { sqpoll } for pid=24692 comm="syz.5.4896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1731.706857][ T29] audit: type=1400 audit(1641.998:14198): avc: denied { create } for pid=24692 comm="syz.5.4896" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1731.873482][ T29] audit: type=1400 audit(1642.017:14199): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1731.922006][ T29] audit: type=1400 audit(1642.035:14200): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1732.023300][T24701] netlink: 'syz.0.4897': attribute type 39 has an invalid length. [ 1732.363170][ T29] audit: type=1400 audit(1642.035:14201): avc: denied { execute } for pid=24692 comm="syz.5.4896" name="file0" dev="tmpfs" ino=4361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1732.419796][ T29] audit: type=1400 audit(1642.044:14202): avc: denied { execute_no_trans } for pid=24692 comm="syz.5.4896" path="/789/file0" dev="tmpfs" ino=4361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1732.505980][ T29] audit: type=1400 audit(1642.063:14203): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1732.663078][ T29] audit: type=1400 audit(1642.091:14204): avc: denied { map_create } for pid=24695 comm="syz.0.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1732.706681][ T29] audit: type=1400 audit(1642.091:14205): avc: denied { map_create } for pid=24695 comm="syz.0.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1734.087274][T24734] netlink: 'syz.4.4906': attribute type 39 has an invalid length. [ 1734.397947][T24730] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4909'. [ 1734.944593][T24735] siw: device registration error -23 [ 1735.264347][T24740] siw: device registration error -23 [ 1735.289934][T24749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4914'. [ 1735.364336][T24749] .`: (slave syz_tun): Releasing backup interface [ 1735.466349][T24752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4913'. [ 1735.501428][T24752] --map-set only usable from mangle table [ 1735.549551][T24752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4913'. [ 1736.312225][T24760] netlink: 'syz.0.4917': attribute type 1 has an invalid length. [ 1736.489241][T24762] siw: device registration error -23 [ 1736.992922][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 1736.992939][ T29] audit: type=1400 audit(1647.036:14523): avc: denied { module_request } for pid=24763 comm="syz.5.4919" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1737.096030][ T29] audit: type=1400 audit(1647.119:14524): avc: denied { sys_module } for pid=24763 comm="syz.5.4919" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1737.176938][ T29] audit: type=1400 audit(1647.156:14525): avc: denied { module_request } for pid=24763 comm="syz.5.4919" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1737.257056][T24777] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4918'. [ 1737.354630][ T29] audit: type=1400 audit(1647.165:14526): avc: denied { create } for pid=24761 comm="syz.1.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1737.422754][ T29] audit: type=1400 audit(1647.175:14527): avc: denied { ioctl } for pid=24761 comm="syz.1.4918" path="socket:[82111]" dev="sockfs" ino=82111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1737.509653][T24777] --map-set only usable from mangle table [ 1737.530662][T24780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4918'. [ 1737.579974][ T29] audit: type=1400 audit(1647.175:14528): avc: denied { module_request } for pid=24761 comm="syz.1.4918" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1737.713916][ T29] audit: type=1400 audit(1647.350:14529): avc: denied { create } for pid=24761 comm="syz.1.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1737.793934][ T29] audit: type=1400 audit(1647.461:14530): avc: denied { sys_module } for pid=24761 comm="syz.1.4918" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1737.850971][ T29] audit: type=1400 audit(1647.470:14531): avc: denied { module_request } for pid=24761 comm="syz.1.4918" kmod="netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1737.909362][ T29] audit: type=1400 audit(1647.479:14532): avc: denied { setopt } for pid=24761 comm="syz.1.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1741.880078][T24853] netlink: 'syz.1.4940': attribute type 39 has an invalid length. [ 1742.127193][T24852] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4942'. [ 1742.429756][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 1742.429774][ T29] audit: type=1400 audit(1652.047:14765): avc: denied { create } for pid=24855 comm="syz.3.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1742.666247][ T29] audit: type=1400 audit(1652.074:14766): avc: denied { ioctl } for pid=24855 comm="syz.3.4944" path="socket:[82325]" dev="sockfs" ino=82325 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1742.943898][ T29] audit: type=1400 audit(1652.074:14767): avc: denied { setopt } for pid=24855 comm="syz.3.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1743.027610][ T29] audit: type=1400 audit(1652.083:14768): avc: denied { write } for pid=24855 comm="syz.3.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1743.095558][ T29] audit: type=1400 audit(1652.083:14769): avc: denied { read } for pid=24855 comm="syz.3.4944" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1743.207588][ T29] audit: type=1400 audit(1652.083:14770): avc: denied { read open } for pid=24855 comm="syz.3.4944" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1743.308451][ T29] audit: type=1400 audit(1652.194:14771): avc: denied { create } for pid=24855 comm="syz.3.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1743.364631][ T29] audit: type=1400 audit(1652.240:14772): avc: denied { write } for pid=24855 comm="syz.3.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1743.411958][ T29] audit: type=1400 audit(1652.406:14773): avc: denied { execute } for pid=24855 comm="syz.3.4944" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1743.510448][ T29] audit: type=1400 audit(1652.425:14774): avc: denied { execute_no_trans } for pid=24855 comm="syz.3.4944" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1743.937046][T24877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4950'. [ 1744.227234][T24882] siw: device registration error -23 [ 1745.889792][T24909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4954'. [ 1746.023295][T24909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4954'. [ 1746.203534][T24913] syzkaller0: Caught tx_queue_len zero misconfig [ 1746.331170][T23890] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1746.526470][T23890] usb 2-1: Using ep0 maxpacket: 8 [ 1746.611630][T23890] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1746.634787][T23890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.663554][T23890] usb 2-1: Product: syz [ 1746.682610][T23890] usb 2-1: Manufacturer: syz [ 1746.697975][T23890] usb 2-1: SerialNumber: syz [ 1746.728779][T23890] usb 2-1: config 0 descriptor?? [ 1746.752216][T24922] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4963'. [ 1747.017040][T23890] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1747.365192][T24936] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4967'. [ 1747.735487][T23890] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1747.778654][T23890] usb 2-1: USB disconnect, device number 43 [ 1748.158976][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 1748.158995][ T29] audit: type=1400 audit(1657.334:14950): avc: denied { create } for pid=24941 comm="syz.0.4968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1748.252310][ T29] audit: type=1400 audit(1657.334:14951): avc: denied { bind } for pid=24941 comm="syz.0.4968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1748.326527][T24942] siw: device registration error -23 [ 1748.338501][ T29] audit: type=1400 audit(1657.343:14952): avc: denied { map_create } for pid=24941 comm="syz.0.4968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1748.395534][ T29] audit: type=1400 audit(1657.343:14953): avc: denied { map_create } for pid=24941 comm="syz.0.4968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1748.447053][ T29] audit: type=1400 audit(1657.343:14954): avc: denied { map_read map_write } for pid=24941 comm="syz.0.4968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1748.629830][ T29] audit: type=1400 audit(1657.343:14955): avc: denied { prog_load } for pid=24941 comm="syz.0.4968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1748.655603][T24944] siw: device registration error -23 [ 1748.663419][ T29] audit: type=1400 audit(1657.343:14956): avc: denied { bpf } for pid=24941 comm="syz.0.4968" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1749.136007][ T29] audit: type=1400 audit(1657.343:14957): avc: denied { map_create } for pid=24941 comm="syz.0.4968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1749.164968][ T29] audit: type=1400 audit(1657.343:14958): avc: denied { bpf } for pid=24941 comm="syz.0.4968" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1749.226375][ T29] audit: type=1400 audit(1657.343:14959): avc: denied { map_create } for pid=24941 comm="syz.0.4968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1749.231319][T24954] overlayfs: failed to clone upperpath [ 1749.631658][T24958] overlayfs: failed to clone upperpath [ 1749.988820][T24965] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4977'. [ 1750.209285][T24968] bridge0: port 1(syz_tun) entered disabled state [ 1750.386503][T24979] fuse: fd is not a fuse device [ 1750.721933][T24986] fuse: fd is not a fuse device [ 1751.043522][T24987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4979'. [ 1751.080914][T24987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4979'. [ 1751.187232][T24992] --map-set only usable from mangle table [ 1751.240801][T18228] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1751.294380][T18228] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.346217][T18228] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1751.436107][T18228] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.492320][T24992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4979'. [ 1751.542453][T18228] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1751.597857][T18228] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.654842][T18228] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1751.705442][T18228] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.947907][T24998] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4987'. [ 1752.118783][T23890] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1752.368356][T23890] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1752.417437][T23890] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1752.463213][T23890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1752.509118][T23890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1752.560199][T23890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1752.671574][T23890] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1752.719382][T23890] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1752.754401][T25008] lo: Caught tx_queue_len zero misconfig [ 1752.797326][T23890] usb 4-1: Product: syz [ 1752.809792][T23890] usb 4-1: Manufacturer: syz [ 1752.866980][T23890] cdc_wdm 4-1:1.0: skipping garbage [ 1752.891319][T23890] cdc_wdm 4-1:1.0: skipping garbage [ 1752.942764][T23890] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1752.968398][T23890] cdc_wdm 4-1:1.0: Unknown control protocol [ 1753.489750][T23194] usb 4-1: USB disconnect, device number 63 [ 1753.620014][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 1753.620036][ T29] audit: type=1400 audit(1662.325:15165): avc: denied { bpf } for pid=25017 comm="syz.4.4992" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1753.706451][T25018] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4992'. [ 1753.783008][ T29] audit: type=1400 audit(1662.408:15166): avc: denied { prog_load } for pid=25017 comm="syz.4.4992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1754.017723][ T29] audit: type=1400 audit(1662.408:15167): avc: denied { perfmon } for pid=25017 comm="syz.4.4992" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1754.129425][ T29] audit: type=1400 audit(1662.408:15168): avc: denied { perfmon } for pid=25017 comm="syz.4.4992" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1754.226262][ T29] audit: type=1400 audit(1662.408:15169): avc: denied { perfmon } for pid=25017 comm="syz.4.4992" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1754.318449][ T29] audit: type=1400 audit(1662.427:15170): avc: denied { perfmon } for pid=25017 comm="syz.4.4992" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1754.396281][ T29] audit: type=1400 audit(1662.427:15171): avc: denied { bpf } for pid=25017 comm="syz.4.4992" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1754.476852][ T29] audit: type=1400 audit(1662.427:15172): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1754.580294][ T29] audit: type=1400 audit(1662.427:15173): avc: denied { read write open } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1754.719242][ T29] audit: type=1400 audit(1662.436:15174): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1755.164643][T25035] siw: device registration error -23 [ 1755.723285][T25043] lo speed is unknown, defaulting to 1000 [ 1755.849221][T25043] lo speed is unknown, defaulting to 1000 [ 1755.855888][T25043] lo speed is unknown, defaulting to 1000 [ 1756.327735][T25053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5001'. [ 1756.367189][T25053] --map-set only usable from mangle table [ 1756.436729][T25054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5001'. [ 1758.368021][T25080] netlink: 'syz.3.5011': attribute type 3 has an invalid length. [ 1758.409379][T25080] netlink: 'syz.3.5011': attribute type 3 has an invalid length. [ 1758.604941][T25083] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5013'. [ 1758.848795][T25084] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5012'. [ 1758.974117][T25084] bridge0: port 3(dummy0) entered disabled state [ 1759.065142][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 1759.065155][ T29] audit: type=1400 audit(1667.391:15506): avc: denied { read } for pid=25095 comm="syz.3.5016" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1759.159893][ T29] audit: type=1400 audit(1667.391:15507): avc: denied { read open } for pid=25095 comm="syz.3.5016" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1759.241675][ T29] audit: type=1400 audit(1667.437:15508): avc: denied { ioctl } for pid=25095 comm="syz.3.5016" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1759.337464][T25099] siw: device registration error -23 [ 1759.370211][ T29] audit: type=1400 audit(1667.437:15509): avc: denied { set_context_mgr } for pid=25095 comm="syz.3.5016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1759.435022][T25084] dummy0 (unregistering): left allmulticast mode [ 1759.454064][T25084] dummy0 (unregistering): left promiscuous mode [ 1759.466608][ T29] audit: type=1400 audit(1667.446:15510): avc: denied { read } for pid=25095 comm="syz.3.5016" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1759.495019][T25084] bridge0: port 3(dummy0) entered disabled state [ 1759.527866][ T29] audit: type=1400 audit(1667.446:15511): avc: denied { read open } for pid=25095 comm="syz.3.5016" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1759.580436][ T29] audit: type=1400 audit(1667.456:15512): avc: denied { ioctl } for pid=25095 comm="syz.3.5016" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1759.631377][ T29] audit: type=1400 audit(1667.456:15513): avc: denied { read } for pid=25095 comm="syz.3.5016" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1759.661851][ T29] audit: type=1400 audit(1667.456:15514): avc: denied { read open } for pid=25095 comm="syz.3.5016" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1759.686160][ T29] audit: type=1400 audit(1667.465:15515): avc: denied { map } for pid=25095 comm="syz.3.5016" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1760.743861][T25115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5023'. [ 1760.805229][T25115] --map-set only usable from mangle table [ 1760.845142][T25115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5023'. [ 1761.261819][T25130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5025'. [ 1761.271516][T25130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5025'. [ 1761.942745][T25136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5025'. [ 1763.556749][T25156] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 1763.570456][T25156] ref_ctr increment failed for inode: 0x1694 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888034e56200 [ 1763.642602][T25160] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 1763.663497][T25160] ref_ctr decrement failed for inode: 0x1694 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888034e56200 [ 1763.699040][T25160] uprobe: syz.4.5033:25160 failed to unregister, leaking uprobe [ 1764.475543][T25178] fuse: fd is not a fuse device [ 1764.512201][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 1764.512213][ T29] audit: type=1400 audit(1672.420:15715): avc: denied { create } for pid=25174 comm="syz.5.5041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1764.552377][ T29] audit: type=1400 audit(1672.457:15716): avc: denied { setopt } for pid=25177 comm="syz.0.5042" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1764.627288][ T29] audit: type=1400 audit(1672.466:15717): avc: denied { ioctl } for pid=25174 comm="syz.5.5041" path="socket:[82837]" dev="sockfs" ino=82837 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1764.718356][ T29] audit: type=1400 audit(1672.466:15718): avc: denied { module_request } for pid=25174 comm="syz.5.5041" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1764.943217][ T29] audit: type=1400 audit(1672.503:15719): avc: denied { create } for pid=25161 comm="syz.3.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1764.965172][ T29] audit: type=1400 audit(1672.521:15720): avc: denied { write } for pid=25161 comm="syz.3.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1765.445423][ T29] audit: type=1400 audit(1672.577:15721): avc: denied { create } for pid=25173 comm="syz.1.5040" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1765.467738][ T29] audit: type=1400 audit(1672.595:15722): avc: denied { create } for pid=25161 comm="syz.3.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1765.487751][ T29] audit: type=1400 audit(1672.595:15723): avc: denied { bind } for pid=25161 comm="syz.3.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1765.528552][ T29] audit: type=1400 audit(1672.604:15724): avc: denied { write } for pid=25161 comm="syz.3.5036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1765.896066][T25191] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5044'. [ 1766.274051][T25199] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5047'. [ 1768.239492][T25227] fuse: fd is not a fuse device [ 1768.377836][T25230] overlayfs: failed to clone upperpath [ 1770.213390][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 1770.213404][ T29] audit: type=1400 audit(1677.679:15871): avc: denied { create } for pid=25246 comm="syz.5.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1770.302412][ T29] audit: type=1400 audit(1677.725:15872): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1770.375825][ T29] audit: type=1400 audit(1677.725:15873): avc: denied { read write open } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1770.421632][ T29] audit: type=1400 audit(1677.725:15874): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1770.499653][ T29] audit: type=1400 audit(1677.956:15875): avc: denied { execmem } for pid=25249 comm="syz.4.5063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1770.623183][T25256] overlayfs: failed to clone upperpath [ 1770.629321][ T29] audit: type=1400 audit(1678.067:15876): avc: denied { mounton } for pid=25252 comm="syz.1.5064" path="/895/bus" dev="tmpfs" ino=4880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1770.671440][ T29] audit: type=1400 audit(1678.104:15877): avc: denied { module_request } for pid=25252 comm="syz.1.5064" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1770.888571][ T29] audit: type=1400 audit(1678.196:15878): avc: denied { create } for pid=25249 comm="syz.4.5063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1771.176577][ T29] audit: type=1400 audit(1678.205:15879): avc: denied { connect } for pid=25249 comm="syz.4.5063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1771.250183][ T29] audit: type=1400 audit(1678.214:15880): avc: denied { create } for pid=25249 comm="syz.4.5063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1773.399382][T25292] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5071'. [ 1773.448695][T25292] --map-set only usable from mangle table [ 1773.495141][T25292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5071'. [ 1773.984463][T25299] siw: device registration error -23 [ 1775.691885][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 1775.691905][ T29] audit: type=1400 audit(1682.689:16124): avc: denied { execmem } for pid=25330 comm="syz.5.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1776.087796][ T29] audit: type=1400 audit(1682.966:16125): avc: denied { map_create } for pid=25330 comm="syz.5.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1776.174698][ T29] audit: type=1400 audit(1682.975:16126): avc: denied { map_create } for pid=25330 comm="syz.5.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1776.219028][T25337] PKCS7: Unknown OID: [4] 0.0 [ 1776.230989][T25337] PKCS7: Only support pkcs7_signedData type [ 1776.251217][ T29] audit: type=1400 audit(1682.975:16127): avc: denied { map_read map_write } for pid=25330 comm="syz.5.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1776.288004][ T29] audit: type=1400 audit(1682.985:16128): avc: denied { prog_load } for pid=25330 comm="syz.5.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1776.367435][ T29] audit: type=1400 audit(1682.994:16129): avc: denied { bpf } for pid=25330 comm="syz.5.5084" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1776.435322][ T29] audit: type=1400 audit(1683.003:16130): avc: denied { prog_load } for pid=25330 comm="syz.5.5084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1776.571914][ T29] audit: type=1400 audit(1683.012:16131): avc: denied { perfmon } for pid=25330 comm="syz.5.5084" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1776.650329][ T29] audit: type=1400 audit(1683.012:16132): avc: denied { perfmon } for pid=25330 comm="syz.5.5084" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1776.703492][ T29] audit: type=1400 audit(1683.022:16133): avc: denied { perfmon } for pid=25330 comm="syz.5.5084" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1776.735244][T25346] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5088'. [ 1777.152966][T25351] netlink: 'syz.4.5090': attribute type 29 has an invalid length. [ 1777.198147][T25351] netlink: 'syz.4.5090': attribute type 29 has an invalid length. [ 1777.273920][T25351] netlink: 'syz.4.5090': attribute type 32 has an invalid length. [ 1777.301705][T25351] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5090'. [ 1777.332181][T25354] lo speed is unknown, defaulting to 1000 [ 1778.177801][T25354] lo speed is unknown, defaulting to 1000 [ 1778.205081][T25366] syzkaller0: entered promiscuous mode [ 1778.223462][T25366] syzkaller0: entered allmulticast mode [ 1778.266299][T25366] 0: reclassify loop, rule prio 0, protocol 800 [ 1778.268800][T25354] lo speed is unknown, defaulting to 1000 [ 1778.502134][T25370] syzkaller0: entered promiscuous mode [ 1778.528228][T25370] syzkaller0: entered allmulticast mode [ 1778.646409][T25374] siw: device registration error -23 [ 1778.760163][T25379] syzkaller0: entered promiscuous mode [ 1778.769801][T25379] syzkaller0: entered allmulticast mode [ 1779.412813][T25389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5106'. [ 1781.116152][T25419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5111'. [ 1781.152523][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 1781.152540][ T29] audit: type=1400 audit(1687.783:16402): avc: denied { create } for pid=25409 comm="syz.0.5111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1781.196666][T25419] --map-set only usable from mangle table [ 1781.244363][T25419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5111'. [ 1781.257624][ T29] audit: type=1400 audit(1687.820:16403): avc: denied { setopt } for pid=25409 comm="syz.0.5111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1781.307163][ T29] audit: type=1400 audit(1687.903:16404): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1781.353119][ T29] audit: type=1400 audit(1687.921:16405): avc: denied { read write } for pid=5813 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1781.392041][ T29] audit: type=1400 audit(1687.921:16406): avc: denied { read write open } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1781.533975][ T29] audit: type=1400 audit(1687.967:16407): avc: denied { ioctl } for pid=5813 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1781.657273][ T29] audit: type=1400 audit(1688.032:16408): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1781.733629][T25424] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5114'. [ 1781.916345][ T29] audit: type=1400 audit(1688.041:16409): avc: denied { read write open } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1782.381116][ T29] audit: type=1400 audit(1688.050:16410): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1782.409274][ T29] audit: type=1400 audit(1688.244:16411): avc: denied { create } for pid=25420 comm="syz.5.5114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1782.773641][T25424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5114'. [ 1783.637003][T25438] netlink: 'syz.1.5119': attribute type 2 has an invalid length. [ 1783.700296][T25438] ‚#{6c: entered promiscuous mode [ 1783.745767][T25438] netlink: 'syz.1.5119': attribute type 2 has an invalid length. [ 1783.769395][T25438] ‚#{6c: left promiscuous mode [ 1785.668424][T25472] bridge0: port 1(hsr0) entered blocking state [ 1785.696764][T25472] bridge0: port 1(hsr0) entered disabled state [ 1785.727497][T25472] hsr0: entered allmulticast mode [ 1785.750796][T25472] hsr_slave_0: entered allmulticast mode [ 1785.791445][T25472] hsr_slave_1: entered allmulticast mode [ 1785.863730][T25472] hsr0: entered promiscuous mode [ 1786.733320][ T29] kauditd_printk_skb: 2761 callbacks suppressed [ 1786.733340][ T29] audit: type=1400 audit(1692.811:16644): avc: denied { prog_load } for pid=25481 comm="syz.3.5129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1786.733399][ T29] audit: type=1400 audit(1692.821:16645): avc: denied { bpf } for pid=25481 comm="syz.3.5129" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1786.733443][ T29] audit: type=1400 audit(1692.830:16646): avc: denied { prog_load } for pid=25481 comm="syz.3.5129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1786.733537][ T29] audit: type=1400 audit(1692.830:16647): avc: denied { perfmon } for pid=25481 comm="syz.3.5129" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1786.733580][ T29] audit: type=1400 audit(1692.839:16648): avc: denied { perfmon } for pid=25481 comm="syz.3.5129" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1786.733624][ T29] audit: type=1400 audit(1692.839:16649): avc: denied { perfmon } for pid=25481 comm="syz.3.5129" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1786.733666][ T29] audit: type=1400 audit(1692.839:16650): avc: denied { perfmon } for pid=25481 comm="syz.3.5129" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1786.733708][ T29] audit: type=1400 audit(1692.848:16651): avc: denied { bpf } for pid=25481 comm="syz.3.5129" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1786.733751][ T29] audit: type=1400 audit(1692.876:16652): avc: denied { bpf } for pid=25481 comm="syz.3.5129" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1786.733790][ T29] audit: type=1400 audit(1692.876:16653): avc: denied { prog_run } for pid=25481 comm="syz.3.5129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1787.412972][T25494] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5132'. [ 1787.814360][T25503] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5135'. [ 1789.073539][T25519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5133'. [ 1789.112420][T25519] --map-set only usable from mangle table [ 1789.224073][T25519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5133'. [ 1789.767117][T25521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5139'. [ 1789.794650][T25539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5142'. [ 1789.859823][T25540] --map-set only usable from mangle table [ 1790.688094][T25540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5142'. [ 1791.380479][T11492] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1791.608237][T25577] tipc: Enabled bearer , priority 0 [ 1791.725541][T25578] netlink: 'syz.3.5152': attribute type 39 has an invalid length. [ 1792.278003][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 1792.278021][ T29] audit: type=1400 audit(1698.043:16888): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1792.370329][ T29] audit: type=1400 audit(1698.043:16889): avc: denied { read write open } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1792.448300][ T29] audit: type=1400 audit(1698.052:16890): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1792.543275][ T29] audit: type=1400 audit(1698.135:16891): avc: denied { allowed } for pid=25581 comm="syz.0.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1792.611580][ T29] audit: type=1400 audit(1698.135:16892): avc: denied { create } for pid=25581 comm="syz.0.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1792.658065][ T29] audit: type=1400 audit(1698.154:16893): avc: denied { connect } for pid=25581 comm="syz.0.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1792.706596][ T29] audit: type=1400 audit(1698.163:16894): avc: denied { listen } for pid=25581 comm="syz.0.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1792.842178][ T29] audit: type=1400 audit(1698.182:16895): avc: denied { accept } for pid=25581 comm="syz.0.5159" lport=35338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1793.026267][ T29] audit: type=1400 audit(1698.191:16896): avc: denied { execute } for pid=25582 comm="syz.4.5158" path="/dev/nullb0" dev="tmpfs" ino=2457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1793.329415][T25588] siw: device registration error -23 [ 1793.506482][T25598] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1793.523079][T25589] siw: device registration error -23 [ 1793.825339][T25601] siw: device registration error -23 [ 1793.845907][T25605] netlink: 'syz.5.5161': attribute type 39 has an invalid length. [ 1796.038349][T20855] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1796.452332][T25643] netlink: 'syz.1.5173': attribute type 39 has an invalid length. [ 1796.935416][T25644] siw: device registration error -23 [ 1797.637241][T20855] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1797.656103][T25658] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 1797.665119][T20855] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1797.791931][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 1797.791948][ T29] audit: type=1400 audit(1703.127:17276): avc: denied { create } for pid=25655 comm="syz.0.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1798.192984][ T29] audit: type=1400 audit(1703.127:17277): avc: denied { write } for pid=25655 comm="syz.0.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1798.217005][ T29] audit: type=1400 audit(1703.127:17278): avc: denied { read } for pid=25655 comm="syz.0.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1798.361441][ T29] audit: type=1400 audit(1703.136:17279): avc: denied { read } for pid=25655 comm="syz.0.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1798.504922][T25666] netlink: 'syz.4.5184': attribute type 39 has an invalid length. [ 1798.776040][ T29] audit: type=1400 audit(1703.164:17280): avc: denied { bpf } for pid=25656 comm="syz.4.5184" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1798.799716][ T29] audit: type=1400 audit(1703.164:17281): avc: denied { execmem } for pid=25653 comm="syz.5.5182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1798.856481][ T29] audit: type=1326 audit(1703.312:17282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25650 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84479c819 code=0x7ffc0000 [ 1798.910023][T25665] netlink: 'syz.5.5182': attribute type 39 has an invalid length. [ 1798.970919][ T29] audit: type=1326 audit(1703.312:17283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25650 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84479c819 code=0x7ffc0000 [ 1799.058645][ T29] audit: type=1326 audit(1703.321:17284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25650 comm="syz.1.5181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd84479c819 code=0x7ffc0000 [ 1799.119987][ T29] audit: type=1400 audit(1703.330:17285): avc: denied { read write } for pid=25650 comm="syz.1.5181" name="qat_adf_ctl" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1799.386464][T25673] No such timeout policy "syz0" [ 1800.416404][T25675] siw: device registration error -23 [ 1801.929692][T25695] netlink: 'syz.0.5191': attribute type 39 has an invalid length. [ 1802.229202][T25699] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1802.365406][T25703] syz.3.5194 (25703): drop_caches: 4 [ 1802.727367][T25699] veth0_to_team: entered promiscuous mode [ 1803.082157][T25710] fuse: fd is not a fuse device [ 1803.397030][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 1803.397045][ T29] audit: type=1400 audit(1708.304:17455): avc: denied { create } for pid=25712 comm="syz.3.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1803.507063][ T29] audit: type=1400 audit(1708.387:17456): avc: denied { read } for pid=25712 comm="syz.3.5197" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1803.627923][T20855] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1803.638701][ T29] audit: type=1400 audit(1708.387:17457): avc: denied { read open } for pid=25712 comm="syz.3.5197" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1803.838214][ T29] audit: type=1400 audit(1708.396:17458): avc: denied { ioctl } for pid=25712 comm="syz.3.5197" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1804.389129][ T29] audit: type=1400 audit(1708.405:17459): avc: denied { ioctl } for pid=25712 comm="syz.3.5197" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1804.557326][ T29] audit: type=1400 audit(1708.405:17460): avc: denied { ioctl } for pid=25712 comm="syz.3.5197" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1804.570366][T25719] --map-set only usable from mangle table [ 1804.714958][T25723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5198'. [ 1804.733077][ T29] audit: type=1400 audit(1708.470:17461): avc: denied { ioctl } for pid=25712 comm="syz.3.5197" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1804.815473][ T29] audit: type=1400 audit(1708.470:17462): avc: denied { map_create } for pid=25715 comm="syz.4.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1804.864517][ T29] audit: type=1400 audit(1708.479:17463): avc: denied { map_create } for pid=25715 comm="syz.4.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1805.011759][ T29] audit: type=1400 audit(1708.479:17464): avc: denied { map_read map_write } for pid=25715 comm="syz.4.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1805.829492][T25739] siw: device registration error -23 [ 1807.469026][T20855] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1808.834858][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 1808.834896][ T29] audit: type=1400 audit(1713.258:17627): avc: denied { create } for pid=25767 comm="syz.5.5213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1809.150814][ T29] audit: type=1400 audit(1713.277:17628): avc: denied { connect } for pid=25767 comm="syz.5.5213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1809.218537][ T29] audit: type=1400 audit(1713.295:17629): avc: denied { create } for pid=25767 comm="syz.5.5213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1809.299768][ T29] audit: type=1400 audit(1713.314:17630): avc: denied { mounton } for pid=25767 comm="syz.5.5213" path="/854/file0" dev="tmpfs" ino=4713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1809.347324][ T29] audit: type=1400 audit(1713.701:17631): avc: denied { open } for pid=25772 comm="syz.1.5215" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1809.464510][ T29] audit: type=1400 audit(1713.701:17632): avc: denied { create } for pid=25773 comm="syz.4.5214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1809.512121][ T29] audit: type=1400 audit(1713.711:17633): avc: denied { ioctl } for pid=25772 comm="syz.1.5215" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1809.588892][ T29] audit: type=1400 audit(1713.711:17634): avc: denied { read write } for pid=25772 comm="syz.1.5215" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1809.733644][ T29] audit: type=1400 audit(1713.720:17635): avc: denied { read write open } for pid=25772 comm="syz.1.5215" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1809.795884][ T29] audit: type=1400 audit(1713.729:17636): avc: denied { create } for pid=25773 comm="syz.4.5214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1809.948756][T25785] kvm: kvm [25779]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1810.152911][T25785] kvm: kvm [25779]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1810.674947][T25785] kvm: kvm [25779]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 1811.520997][T20855] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1812.229852][T25822] tipc: Enabling of bearer rejected, failed to enable media [ 1813.016876][T25837] netlink: 'syz.0.5230': attribute type 39 has an invalid length. [ 1813.302690][T25840] loop6: detected capacity change from 0 to 2640 [ 1813.324488][T25840] buffer_io_error: 28 callbacks suppressed [ 1813.324519][T25840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1813.391478][T25840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1813.419227][T25840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1813.485465][T25840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1813.526446][T25840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1813.553736][T25840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1813.588867][T25840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1813.614861][T25840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1813.616474][T25846] tipc: Enabling of bearer rejected, failed to enable media [ 1813.646219][T25840] ldm_validate_partition_table(): Disk read failed. [ 1813.669546][T25840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1813.702919][T25840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1813.737570][T25840] Dev loop6: unable to read RDB block 0 [ 1813.768634][T25840] loop6: unable to read partition table [ 1813.787925][T25840] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1814.276854][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 1814.276872][ T29] audit: type=1400 audit(1718.343:17916): avc: denied { read } for pid=25855 comm="syz.3.5237" dev="nsfs" ino=4026533041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1814.468147][ T29] audit: type=1400 audit(1718.407:17917): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1814.995046][ T29] audit: type=1400 audit(1718.407:17918): avc: denied { read write open } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1815.113538][ T29] audit: type=1400 audit(1718.407:17919): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1815.218925][ T29] audit: type=1400 audit(1718.416:17920): avc: denied { read open } for pid=25855 comm="syz.3.5237" path="net:[4026533041]" dev="nsfs" ino=4026533041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1815.268286][T25866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5238'. [ 1815.317108][T25866] --map-set only usable from mangle table [ 1815.336776][ T29] audit: type=1400 audit(1718.426:17921): avc: denied { execmem } for pid=25855 comm="syz.3.5237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1815.416238][T25866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5238'. [ 1815.446996][ T29] audit: type=1400 audit(1718.952:17922): avc: denied { create } for pid=25855 comm="syz.3.5237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1815.539654][ T29] audit: type=1400 audit(1719.182:17923): avc: denied { create } for pid=25863 comm="syz.1.5238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1815.608867][ T29] audit: type=1400 audit(1719.191:17924): avc: denied { ioctl } for pid=25863 comm="syz.1.5238" path="socket:[86663]" dev="sockfs" ino=86663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1815.701997][ T29] audit: type=1400 audit(1719.191:17925): avc: denied { module_request } for pid=25863 comm="syz.1.5238" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1816.533558][T25884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5239'. [ 1816.695732][T25884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5239'. [ 1817.209857][T25891] siw: device registration error -23 [ 1818.325420][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1818.395458][T25909] netlink: 'syz.1.5250': attribute type 1 has an invalid length. [ 1818.633460][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.693647][T25911] bond0: (slave bridge1): making interface the new active one [ 1818.706870][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1818.738408][T25911] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 1818.764022][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.815192][ T9] usb 4-1: config 0 descriptor?? [ 1818.827546][T25909] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 1818.897254][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1819.436878][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1819.545648][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1819.553903][T25920] --map-set only usable from mangle table [ 1819.611765][T25920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5251'. [ 1819.659544][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1819.705953][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 1819.705970][ T29] audit: type=1400 audit(1723.353:18079): avc: denied { ioctl } for pid=25899 comm="syz.3.5246" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1819.764481][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1819.861925][ T29] audit: type=1400 audit(1723.427:18080): avc: denied { create } for pid=25899 comm="syz.3.5246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1819.968000][ T29] audit: type=1400 audit(1723.464:18081): avc: denied { allowed } for pid=25899 comm="syz.3.5246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1820.047417][ T29] audit: type=1400 audit(1723.464:18082): avc: denied { create } for pid=25899 comm="syz.3.5246" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1820.136923][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1820.153918][ T29] audit: type=1400 audit(1723.464:18083): avc: denied { map } for pid=25899 comm="syz.3.5246" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1820.276758][ T29] audit: type=1400 audit(1723.574:18084): avc: denied { create } for pid=25921 comm="syz.1.5252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1820.316819][T25902] loop9: detected capacity change from 0 to 524287936 [ 1820.353038][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1820.408361][ T29] audit: type=1400 audit(1723.574:18085): avc: denied { bind } for pid=25921 comm="syz.1.5252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1820.506276][ T29] audit: type=1400 audit(1723.639:18086): avc: denied { read write } for pid=25899 comm="syz.3.5246" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1820.633585][ T29] audit: type=1400 audit(1723.639:18087): avc: denied { map } for pid=25899 comm="syz.3.5246" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1820.761946][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 1820.775571][ T29] audit: type=1400 audit(1723.639:18088): avc: denied { read write } for pid=25899 comm="syz.3.5246" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1820.854082][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 1820.936303][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 1820.987668][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 1821.034471][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1821.080061][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1821.111720][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1821.151565][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1821.179236][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1821.211046][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1821.507697][ T9] pwc: Registered as video103. [ 1821.552724][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 1821.773433][ T9] usb 4-1: USB disconnect, device number 64 [ 1823.090666][T25935] syzkaller0: entered promiscuous mode [ 1823.115287][T25935] syzkaller0: entered allmulticast mode [ 1823.395141][T25942] siw: device registration error -23 [ 1824.753043][T25964] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1825.584527][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 1825.585723][ T29] audit: type=1400 audit(1728.769:18229): avc: denied { write } for pid=25959 comm="syz.0.5263" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1825.915988][T25968] netlink: 'syz.0.5263': attribute type 39 has an invalid length. [ 1826.002589][ T29] audit: type=1400 audit(1728.861:18230): avc: denied { prog_load } for pid=25959 comm="syz.0.5263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1826.112512][ T29] audit: type=1400 audit(1728.880:18231): avc: denied { bpf } for pid=25959 comm="syz.0.5263" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1826.259759][ T29] audit: type=1400 audit(1728.935:18232): avc: denied { execmem } for pid=25959 comm="syz.0.5263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1826.318535][ T29] audit: type=1326 audit(1729.083:18233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.0.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3995b9c819 code=0x7ffc0000 [ 1826.454984][ T29] audit: type=1326 audit(1729.083:18234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.0.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3995b9c819 code=0x7ffc0000 [ 1826.695825][ T29] audit: type=1326 audit(1729.083:18235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.0.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3995b9c819 code=0x7ffc0000 [ 1826.797880][ T29] audit: type=1326 audit(1729.083:18236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.0.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3995b9c819 code=0x7ffc0000 [ 1826.851783][ T29] audit: type=1326 audit(1729.083:18237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.0.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3995b9c819 code=0x7ffc0000 [ 1826.994693][ T29] audit: type=1326 audit(1729.083:18238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.0.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3995b9c819 code=0x7ffc0000 [ 1828.148106][T25980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5268'. [ 1830.302338][T26015] netlink: 'syz.5.5278': attribute type 39 has an invalid length. [ 1831.008526][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 1831.008545][ T29] audit: type=1400 audit(1733.779:18405): avc: denied { bpf } for pid=26020 comm="syz.4.5281" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1831.529091][ T29] audit: type=1400 audit(1734.259:18406): avc: denied { ioctl } for pid=26016 comm="syz.3.5280" path="/dev/video0" dev="devtmpfs" ino=932 ioctlcmd=0x5612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1831.615386][ T29] audit: type=1400 audit(1734.296:18407): avc: denied { ioctl } for pid=26016 comm="syz.3.5280" path="/dev/video0" dev="devtmpfs" ino=932 ioctlcmd=0x560f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1831.725405][ T29] audit: type=1400 audit(1734.444:18408): avc: denied { create } for pid=26030 comm="syz.5.5284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1831.877452][ T29] audit: type=1400 audit(1734.462:18409): avc: denied { bind } for pid=26030 comm="syz.5.5284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1831.944862][ T29] audit: type=1400 audit(1734.462:18410): avc: denied { setopt } for pid=26030 comm="syz.5.5284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1832.017487][ T29] audit: type=1400 audit(1734.471:18411): avc: denied { accept } for pid=26030 comm="syz.5.5284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1832.086978][ T29] audit: type=1400 audit(1734.471:18412): avc: denied { write } for pid=26030 comm="syz.5.5284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1832.127188][ T29] audit: type=1400 audit(1734.471:18413): avc: denied { read } for pid=26030 comm="syz.5.5284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1832.198699][ T29] audit: type=1400 audit(1734.868:18414): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1833.591306][T26038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5287'. [ 1833.759562][T26043] netlink: 'syz.5.5287': attribute type 4 has an invalid length. [ 1833.770829][T26043] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5287'. [ 1833.790572][T26038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5287'. [ 1833.827545][T26043] .`: renamed from bond0 (while UP) [ 1833.921519][T26038] 8021q: adding VLAN 0 to HW filter on device .` [ 1833.972317][T26038] bond1: (slave .`): making interface the new active one [ 1834.012431][T26038] bond1: (slave .`): Enslaving as an active interface with an up link [ 1836.207305][T26088] netlink: 'syz.5.5293': attribute type 39 has an invalid length. [ 1836.550833][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 1836.550851][ T29] audit: type=1400 audit(1738.891:18515): avc: denied { read write } for pid=26091 comm="syz.3.5298" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1836.652486][ T29] audit: type=1400 audit(1738.891:18516): avc: denied { read write open } for pid=26091 comm="syz.3.5298" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1836.740833][ T29] audit: type=1400 audit(1738.910:18517): avc: denied { ioctl } for pid=26091 comm="syz.3.5298" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1836.847256][T18640] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1836.972243][ T29] audit: type=1400 audit(1738.910:18518): avc: denied { ioctl } for pid=26091 comm="syz.3.5298" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1837.020644][T18640] usb 4-1: Using ep0 maxpacket: 16 [ 1837.136192][T26098] netlink: 'syz.5.5299': attribute type 39 has an invalid length. [ 1837.423128][ T29] audit: type=1400 audit(1738.910:18519): avc: denied { ioctl } for pid=26091 comm="syz.3.5298" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1837.472123][T18640] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.489833][ T29] audit: type=1400 audit(1738.928:18520): avc: denied { ioctl } for pid=26091 comm="syz.3.5298" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1837.529049][T18640] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1837.552546][T18640] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1837.568624][T18640] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1837.579775][ T29] audit: type=1400 audit(1739.020:18521): avc: denied { ioctl } for pid=26091 comm="syz.3.5298" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1837.608548][T18640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.618548][ T29] audit: type=1400 audit(1739.057:18522): avc: denied { create } for pid=26093 comm="syz.0.5300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1837.720728][T18640] usb 4-1: config 0 descriptor?? [ 1837.872284][ T29] audit: type=1400 audit(1739.066:18523): avc: denied { map_create } for pid=26094 comm="syz.5.5299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1838.967525][ T29] audit: type=1400 audit(1739.066:18524): avc: denied { prog_load } for pid=26093 comm="syz.0.5300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1839.779629][T26115] [ 1839.781988][T26115] ============================================ [ 1839.788130][T26115] WARNING: possible recursive locking detected [ 1839.794275][T26115] syzkaller #0 Tainted: G L [ 1839.800247][T26115] -------------------------------------------- [ 1839.806389][T26115] syz.3.5298/26115 is trying to acquire lock: [ 1839.812458][T26115] ffffffff8f7c29f0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1839.822724][T26115] [ 1839.822724][T26115] but task is already holding lock: [ 1839.830080][T26115] ffffffff8f7c29f0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1839.840343][T26115] [ 1839.840343][T26115] other info that might help us debug this: [ 1839.848397][T26115] Possible unsafe locking scenario: [ 1839.848397][T26115] [ 1839.855920][T26115] CPU0 [ 1839.859186][T26115] ---- [ 1839.862447][T26115] lock(qp_broker_list.mutex); [ 1839.867290][T26115] lock(qp_broker_list.mutex); [ 1839.872129][T26115] [ 1839.872129][T26115] *** DEADLOCK *** [ 1839.872129][T26115] [ 1839.880254][T26115] May be due to missing lock nesting notation [ 1839.880254][T26115] [ 1839.888562][T26115] 1 lock held by syz.3.5298/26115: [ 1839.893662][T26115] #0: ffffffff8f7c29f0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1839.904464][T26115] [ 1839.904464][T26115] stack backtrace: [ 1839.910344][T26115] CPU: 1 UID: 0 PID: 26115 Comm: syz.3.5298 Tainted: G L syzkaller #0 PREEMPT(full) [ 1839.910378][T26115] Tainted: [L]=SOFTLOCKUP [ 1839.910386][T26115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1839.910399][T26115] Call Trace: [ 1839.910408][T26115] [ 1839.910418][T26115] dump_stack_lvl+0x100/0x190 [ 1839.910447][T26115] print_deadlock_bug.cold+0xbd/0xca [ 1839.910483][T26115] __lock_acquire+0x12bb/0x2630 [ 1839.910514][T26115] lock_acquire+0x1b1/0x370 [ 1839.910537][T26115] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1839.910562][T26115] ? __pfx___might_resched+0x10/0x10 [ 1839.910589][T26115] ? kasan_save_stack+0x3f/0x50 [ 1839.910619][T26115] __mutex_lock+0x1a4/0x1b10 [ 1839.910645][T26115] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1839.910668][T26115] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1839.910690][T26115] ? vmci_host_close+0x115/0x1a0 [ 1839.910722][T26115] ? __fput+0x3ff/0xb50 [ 1839.910744][T26115] ? task_work_run+0x150/0x240 [ 1839.910768][T26115] ? exit_to_user_mode_loop+0x100/0x4a0 [ 1839.910794][T26115] ? do_syscall_64+0x706/0xf80 [ 1839.910816][T26115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.910843][T26115] ? __pfx___mutex_lock+0x10/0x10 [ 1839.910875][T26115] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1839.910899][T26115] vmci_qp_broker_detach+0x14c/0x11e0 [ 1839.910926][T26115] ? kasan_quarantine_put+0x104/0x240 [ 1839.910954][T26115] ? lockdep_hardirqs_on+0x78/0x100 [ 1839.910976][T26115] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1839.910999][T26115] ? ctx_free_ctx+0x3f0/0xda0 [ 1839.911023][T26115] ? ctx_free_ctx+0x4bd/0xda0 [ 1839.911046][T26115] ? kfree+0x223/0x6c0 [ 1839.911072][T26115] ctx_free_ctx+0x517/0xda0 [ 1839.911099][T26115] ? __pfx___schedule+0x10/0x10 [ 1839.911118][T26115] ? __pfx_ctx_free_ctx+0x10/0x10 [ 1839.911144][T26115] ? preempt_schedule_thunk+0x16/0x30 [ 1839.911177][T26115] ? preempt_schedule_common+0x42/0xc0 [ 1839.911198][T26115] ? preempt_schedule_thunk+0x16/0x30 [ 1839.911234][T26115] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 1839.911264][T26115] vmci_datagram_dispatch+0x3db/0xc60 [ 1839.911293][T26115] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1839.911321][T26115] ? find_held_lock+0x2b/0x80 [ 1839.911351][T26115] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 1839.911375][T26115] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 1839.911400][T26115] qp_notify_peer+0x1a6/0x230 [ 1839.911420][T26115] ? __pfx_qp_notify_peer+0x10/0x10 [ 1839.911446][T26115] vmci_qp_broker_detach+0xa20/0x11e0 [ 1839.911472][T26115] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1839.911496][T26115] ? ctx_free_ctx+0x3f0/0xda0 [ 1839.911521][T26115] ? ctx_free_ctx+0x4bd/0xda0 [ 1839.911544][T26115] ? kfree+0x223/0x6c0 [ 1839.911568][T26115] ctx_free_ctx+0x517/0xda0 [ 1839.911593][T26115] ? synchronize_rcu_expedited+0x3c3/0x450 [ 1839.911618][T26115] ? __pfx_ctx_free_ctx+0x10/0x10 [ 1839.911644][T26115] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1839.911669][T26115] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1839.911696][T26115] vmci_ctx_destroy+0x150/0x1c0 [ 1839.911721][T26115] vmci_host_close+0x115/0x1a0 [ 1839.911753][T26115] ? __pfx_vmci_host_close+0x10/0x10 [ 1839.911786][T26115] __fput+0x3ff/0xb50 [ 1839.911811][T26115] task_work_run+0x150/0x240 [ 1839.911841][T26115] ? __pfx_task_work_run+0x10/0x10 [ 1839.911867][T26115] ? rcu_is_watching+0x12/0xc0 [ 1839.911900][T26115] exit_to_user_mode_loop+0x100/0x4a0 [ 1839.911927][T26115] ? do_syscall_64+0x52d/0xf80 [ 1839.911951][T26115] do_syscall_64+0x706/0xf80 [ 1839.911973][T26115] ? clear_bhb_loop+0x40/0x90 [ 1839.911998][T26115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.912020][T26115] RIP: 0033:0x7f93fb19c819 [ 1839.912049][T26115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1839.912074][T26115] RSP: 002b:00007f93fbf8d028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1839.912101][T26115] RAX: 0000000000000000 RBX: 00007f93fb416090 RCX: 00007f93fb19c819 [ 1839.912114][T26115] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 1839.912128][T26115] RBP: 00007f93fb232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1839.912141][T26115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1839.912153][T26115] R13: 00007f93fb416128 R14: 00007f93fb416090 R15: 00007ffec57be0d8 [ 1839.912175][T26115] [ 1842.492878][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 1842.492895][ T29] audit: type=1400 audit(1744.372:18645): avc: denied { read write } for pid=5815 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1842.541657][ T29] audit: type=1400 audit(1744.400:18646): avc: denied { read write open } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1842.566932][ T29] audit: type=1400 audit(1744.400:18647): avc: denied { ioctl } for pid=5815 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1843.232547][T18640] usbhid 4-1:0.0: can't add hid device: -32 [ 1843.238571][T18640] usbhid 4-1:0.0: probe with driver usbhid failed with error -32