_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xe, 0x1, ':]%/)]\x12]$\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x34}}, 0x0) [ 270.050248][ T6413] input: syz0 as /devices/virtual/input/input30 04:23:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0xb, 0x201, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x4, 0x1, '-\x00'}]}, 0x1c}}, 0x0) 04:23:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 04:23:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 04:23:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x2001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 04:23:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:58 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)) syz_mount_image$qnx4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4000a, &(0x7f0000000400)) 04:23:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 04:23:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 04:23:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x2c}}, 0x0) 04:23:58 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 04:23:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:58 executing program 2: syz_mount_image$hfsplus(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540), 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000400)=[{&(0x7f00000000c0)="c46bc9b4fd3810d3008b93942120f9411a5efa928f9f70ed1a334a232c04de3d02e735f78a6398bb70274f11d239", 0x2e, 0x7}, {&(0x7f0000000200)="ed14b972e2975824a69daad052c8b2a5a9212832c28d38d2f8b3075234f0b06198b28768bfd7304525157111ede29af5bc5acf2ca64b62cbf1ccdd32e3a721e429085ecc8903e13cca86765d4f33ba42b65050e7120afd930fef07e67ecc7ec451259562294213d5d4a4e7a6c972f3c2e2204247ab1e185f7255dfa0a220f09ada474829b02dc5ed41a4b80813a673ad2108cbf714f4a130345eeab8d7aa4f727625a323040d435b28dfea634b4c9a625f500fbfd7d43193927e987a60c860e09f977a14f5920f273c710f52f529d79bea67bc18649b4d637312e222e42a3fe7205701eca4ea4aca8a8d4fe00f97999bd76bd2df", 0xf4, 0x100000001}], 0x180022, &(0x7f0000000480)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x0, 0x34]}}}}, {@huge_never}, {@huge_always}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x0]}}, {@huge_never}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@subj_role={'subj_role', 0x3d, ']\'@*#@::!{\xd5\x8f.\x0e'}}, {@obj_role={'obj_role', 0x3d, 'bpf\x00'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) 04:23:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 04:23:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 04:23:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) [ 270.306030][ T6453] loop2: detected capacity change from 0 to 264192 [ 270.317872][ T6455] input: syz1 as /devices/virtual/input/input44 04:23:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 270.342400][ T6458] input: syz0 as /devices/virtual/input/input45 04:23:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) 04:23:59 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000005740), &(0x7f0000005780)={0x5}, &(0x7f00000057c0)={0x8}, 0x0, 0x0) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:59 executing program 2: syz_mount_image$hfsplus(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540), 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000400)=[{&(0x7f00000000c0)="c46bc9b4fd3810d3008b93942120f9411a5efa928f9f70ed1a334a232c04de3d02e735f78a6398bb70274f11d239", 0x2e, 0x7}, {&(0x7f0000000200)="ed14b972e2975824a69daad052c8b2a5a9212832c28d38d2f8b3075234f0b06198b28768bfd7304525157111ede29af5bc5acf2ca64b62cbf1ccdd32e3a721e429085ecc8903e13cca86765d4f33ba42b65050e7120afd930fef07e67ecc7ec451259562294213d5d4a4e7a6c972f3c2e2204247ab1e185f7255dfa0a220f09ada474829b02dc5ed41a4b80813a673ad2108cbf714f4a130345eeab8d7aa4f727625a323040d435b28dfea634b4c9a625f500fbfd7d43193927e987a60c860e09f977a14f5920f273c710f52f529d79bea67bc18649b4d637312e222e42a3fe7205701eca4ea4aca8a8d4fe00f97999bd76bd2df", 0xf4, 0x100000001}], 0x180022, &(0x7f0000000480)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x0, 0x34]}}}}, {@huge_never}, {@huge_always}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x0]}}, {@huge_never}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@subj_role={'subj_role', 0x3d, ']\'@*#@::!{\xd5\x8f.\x0e'}}, {@obj_role={'obj_role', 0x3d, 'bpf\x00'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) [ 270.374366][ T6460] input: syz1 as /devices/virtual/input/input46 [ 270.397916][ T6463] input: syz0 as /devices/virtual/input/input47 04:23:59 executing program 3: syz_mount_image$hfsplus(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540), 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000400)=[{&(0x7f00000000c0)="c46bc9b4fd3810d3008b93942120f9411a5efa928f9f70ed1a334a232c04de3d02e735f78a6398bb70274f11d239", 0x2e, 0x7}, {&(0x7f0000000200)="ed14b972e2975824a69daad052c8b2a5a9212832c28d38d2f8b3075234f0b06198b28768bfd7304525157111ede29af5bc5acf2ca64b62cbf1ccdd32e3a721e429085ecc8903e13cca86765d4f33ba42b65050e7120afd930fef07e67ecc7ec451259562294213d5d4a4e7a6c972f3c2e2204247ab1e185f7255dfa0a220f09ada474829b02dc5ed41a4b80813a673ad2108cbf714f4a130345eeab8d7aa4f727625a323040d435b28dfea634b4c9a625f500fbfd7d43193927e987a60c860e09f977a14f5920f273c710f52f529d79bea67bc18649b4d637312e222e42a3fe7205701eca4ea4aca8a8d4fe00f97999bd76bd2df", 0xf4, 0x100000001}], 0x180022, &(0x7f0000000480)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x0, 0x34]}}}}, {@huge_never}, {@huge_always}, {@huge_advise}, {@nr_blocks={'nr_blocks', 0x3d, [0x0]}}, {@huge_never}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@subj_role={'subj_role', 0x3d, ']\'@*#@::!{\xd5\x8f.\x0e'}}, {@obj_role={'obj_role', 0x3d, 'bpf\x00'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) 04:23:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 270.437344][ T6471] input: syz1 as /devices/virtual/input/input48 [ 270.449317][ T6473] input: syz0 as /devices/virtual/input/input49 [ 270.455465][ T6474] loop2: detected capacity change from 0 to 264192 04:23:59 executing program 1: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 270.495260][ T6476] loop3: detected capacity change from 0 to 264192 04:23:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 1: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 04:23:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 04:23:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r1, 0x5237782de4b08dcf, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) 04:23:59 executing program 1: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 3: r0 = socket(0x28, 0x2, 0x0) connect$netlink(r0, 0x0, 0x0) [ 270.584306][ T6488] input: syz1 as /devices/virtual/input/input50 04:23:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x5044) 04:23:59 executing program 3: r0 = socket(0x25, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x10794}}, 0x4040) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:59 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:23:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 270.690387][ T6511] input: syz1 as /devices/virtual/input/input51 04:23:59 executing program 2: r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='3', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="dc86697525f6d603c54cab72b310b94855be36e26dc3b72321d76b182a23325968c9dd7ae5b0416c0125f5182b6bfd1da5d41caf96103abf9560399a6c6746f77981ed7aa81c29ca2cef68b28dc5d5f609b9878d4cdea85d8c3c8dc6423a7824cc4db822de1449a88427a232d36bcce2d192638dbfb72b1aa25a532771a94cac0f99ddd93a3f98e997f00d3ba88c2b13db553c0e055bb82ba05bfe877d56fbf5228a4260d1db12fe552071820cf990a7df1aa10f57ad6643613c46ac4a107674", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x1}, &(0x7f00000000c0)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000007c0)={r0, r1, r2}, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={'wp256-generic\x00'}}) 04:23:59 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0xc, 0x6, 0x5}, 0x14}}, 0x0) [ 270.753834][ T6520] input: syz1 as /devices/virtual/input/input53 04:23:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote, 0x2}, 0x1c, 0x0}}], 0x1, 0x2ee5e7003b0ccacd) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)='d', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @local, 0x9}, 0x1c, 0x0}}], 0x2, 0x0) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:59 executing program 0: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:23:59 executing program 2: r0 = socket(0x22, 0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:59 executing program 2: r0 = add_key$user(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="92fe390dd9f73243be", 0x9, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="2ac135583d11dbee395e04cf35c76e0f383c485d9ed0ccb813f08ed8c9d7114d266d18e9d3352895ff3ecc6c6f2f1dc3eb9e4d7416a8931983dd39f5229b01ef503d2d77d3919fab8af31c8dcb9f6d5228877f12079ed17c7e3bc2d56a186368fdbf5f0556f2ab857e91dc6bef48ee11595b1257ac0efbc5e0b40f2a6b91935b340765e64f715954d1b08c2848130ac3656ed6d38177db3731911571ac56a1b352aacb53a9ca9ec46f78cdddd240fd0555b09006fdaec922f53fd6024be5b93f", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={'wp512\x00'}}) [ 270.819063][ T6537] input: syz0 as /devices/virtual/input/input56 04:23:59 executing program 0: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) [ 270.828939][ T6538] input: syz1 as /devices/virtual/input/input57 04:23:59 executing program 2: r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 04:23:59 executing program 0: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:23:59 executing program 0: syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 2: r0 = add_key$user(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="92fe390dd9f732", 0x7, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="2ac135583d11dbee395e04cf35c76e0f383c485d9ed0ccb813f08ed8c9d7114d266d18e9d3352895ff3ecc6c6f2f1dc3eb9e4d7416a8931983dd39f5229b01ef503d2d77d3919fab8af31c8dcb9f6d5228877f12079ed17c7e3bc2d56a186368fdbf5f0556f2ab857e91dc6bef48ee11595b1257ac0efbc5e0b40f2a6b91935b340765e64f715954d1b08c2848130ac3656ed6d38177db3731911571ac56a1b352aacb53a9ca9ec46f78cdddd240fd0555b09006fdaec922f53fd6024be5b93f", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={'wp512\x00'}}) [ 270.902606][ T6548] input: syz0 as /devices/virtual/input/input58 [ 270.906349][ T6550] input: syz1 as /devices/virtual/input/input59 04:23:59 executing program 0: syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:59 executing program 2: r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='3', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="dc86697525f6d603c54cab72b310b94855be36e26dc3b72321d76b182a23325968c9dd7ae5b0416c0125f5182b6bfd1da5d41caf96103abf9560399a6c6746f77981ed7aa81c29ca2cef68b28dc5d5f609b9878d4cdea85d8c3c8dc6423a7824cc4db822de1449a88427a232d36bcce2d192638dbfb72b1aa25a532771a94cac0f99ddd93a3f98e997f00d3ba88c2b13db553c0e055bb82ba05bfe877d56fbf5228a4260d1db12fe552071820cf990a7df1aa10f57ad6643613c46ac4a107674", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)="fe", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000007c0)={r0, r1, r2}, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={'ghash-generic\x00'}}) 04:23:59 executing program 0: syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 2: syz_mount_image$hfsplus(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800801, 0x0) [ 270.956294][ T6560] input: syz0 as /devices/virtual/input/input60 04:23:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:23:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) [ 271.016978][ T6569] input: syz0 as /devices/virtual/input/input61 04:23:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 04:23:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) [ 271.055798][ T6582] input: syz0 as /devices/virtual/input/input64 04:23:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:23:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 271.127047][ T6590] input: syz0 as /devices/virtual/input/input67 04:23:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:23:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00', {}, 0x48}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 04:23:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:23:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) [ 271.310500][ T6592] input: syz0 as /devices/virtual/input/input68 04:23:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:23:59 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:24:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:24:00 executing program 3: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x0, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:24:00 executing program 2: r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='3', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="dc86697525f6d603c54cab72b310b94855be36e26dc3b72321d76b182a23325968c9dd7ae5b0416c0125f5182b6bfd1da5d41caf96103abf9560399a6c6746f77981ed7aa81c29ca2cef68b28dc5d5f609b9878d4cdea85d8c3c8dc6423a7824cc4db822de1449a88427a232d36bcce2d192638dbfb72b1aa25a532771a94cac0f99ddd93a3f98e997f00d3ba88c2b13db553c0e055bb82ba05bfe877d56fbf5228a4260d1db12fe552071820cf990a7df1aa10f57ad6643613c46ac4a107674", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x1}, &(0x7f00000000c0)="009de22cf10cff1bc3b2c8d61167221f82057c843c212ed4645ca243b99af2b7c59fa21db78e9e8fe4120d5ec9698f024c1a7df1662c539378cd7f59859a675733ac221853487110a9e0c2c8c76af70c1abe61f5005f81ef371e3d7acfdb6bd4d6678c9a9b34c444da67166628cdc53a9430806dede6f50ff883", 0x7a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000007c0)={r0, r1, r2}, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={'wp256-generic\x00'}}) 04:24:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:24:00 executing program 2: syslog(0x0, 0x0, 0x0) syslog(0x4, &(0x7f0000000000)=""/190, 0xbe) 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x0, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:24:00 executing program 3: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:24:00 executing program 3: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x0, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:24:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:24:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x123) ioctl$UI_DEV_CREATE(r0, 0x5501) 04:24:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x0, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:24:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 271.772212][ T6635] input: syz0 as /devices/virtual/input/input78 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000]}}}) 04:24:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@flowinfo={{0x14, 0x29, 0xb, 0xb9c}}], 0x18}}], 0x2, 0x0) 04:24:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000]}}}) 04:24:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x6}) 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x8000]}}}) 04:24:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:24:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x6}) 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) [ 272.022299][ T6668] input: syz0 as /devices/virtual/input/input82 04:24:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x1, 0x2, {0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}) 04:24:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 04:24:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x6}) 04:24:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) [ 272.113722][ T6681] input: syz0 as /devices/virtual/input/input85 04:24:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x6}) 04:24:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 04:24:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 0: r0 = add_key$user(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="92fe390dd9f73243be03b71ee4", 0xd, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r0, r1, r0}, 0x0, 0x0, 0x0) [ 272.177288][ T6686] input: syz0 as /devices/virtual/input/input87 04:24:00 executing program 2: add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000500)='T', 0x1, 0xffffffffffffffff) 04:24:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 04:24:00 executing program 2: r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='3', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="dc86697525f6d603c54cab72b310b94855be36e26dc3b72321d76b182a23325968c9dd7ae5b0416c0125f5182b6bfd1da5d41caf96103abf9560399a6c6746f77981ed7aa81c29ca2cef68b28dc5d5f609b9878d4cdea85d8c3c8dc6423a7824cc4db822de1449a88427a232d36bcce2d192638dbfb72b1aa25a532771a94cac0f99ddd93a3f98e997f00d3ba88c2b13db553c0e055bb82ba05bfe877d56fbf5228a4260d1db12fe552071820cf990a7df1aa10f57ad6643613c46ac4a107674", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)="fe", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000007c0)={r0, r1, r2}, &(0x7f0000000800)=""/49, 0x31, &(0x7f00000008c0)={&(0x7f0000000840)={'wp256-generic\x00'}, &(0x7f0000000880)="0b83cefdc0b30e05fbe37441654337b079facd27566f37c8eceb75", 0x1b}) [ 272.223854][ T6696] input: syz1 as /devices/virtual/input/input90 04:24:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 0: r0 = socket(0x22, 0x2, 0x4) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000280)) 04:24:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) 04:24:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:01 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x89}, @exit], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:24:01 executing program 1: syz_mount_image$nilfs2(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x3, &(0x7f0000002180)=[{&(0x7f0000000100)="f2", 0x1, 0x80000000}, {&(0x7f0000000180)="f7", 0x1}, {&(0x7f0000000240)="98", 0x1, 0x7fff}], 0x0, 0x0) 04:24:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) [ 272.473390][ T6712] must specify at least one socket [ 272.480256][ T6718] loop1: detected capacity change from 0 to 264192 04:24:01 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x4) read$fb(r0, 0x0, 0x0) 04:24:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000004c0)) 04:24:01 executing program 1: r0 = add_key$user(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="92fe390dd9f7", 0x6, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="2ac135583d11dbee395e04cf35c76e0f383c485d9ed0ccb813f08ed8c9d7114d266d18e9d3352895ff3ecc6c6f2f1dc3eb9e4d7416a8931983dd39f5229b01ef503d2d77d3919fab8af31c8dcb9f6d5228877f12079ed17c7e3bc2d56a186368fdbf5f0556f2ab857e91dc6bef48ee11595b1257ac0efbc5e0b40f2a6b91935b340765e64f715954d1b08c2848130ac3656ed6d38177db3731911571ac56a1b352aacb53a9ca9ec46f78cdddd240fd0555b09006fdaec922f53fd6024be5b93f", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={'wp512\x00'}}) 04:24:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:01 executing program 0: setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000180)=0x1, 0x4) r0 = socket(0x11, 0x0, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000040)="e9e57a602cda885f6217d80d719793711d3c396559e92d0b2892f24a9e4aa7a8df5067e3cc74034d725c02dbf23ddd92356b220f19963cef4ff1fecb5d0a6a67b2ff4aad99a60bf40f0a8a97a87cba1de92e78931061dbb0d2c4dec75b2a03d2de19266bb2e74281d76d829987abb692a93ca4250ec5349a3197615b1046775a0bc6e3cd7a2226ed683e82f387b9bd5883cc4738782035d4f31eb5ce12603d", 0x9f) socket(0x15, 0x5, 0x80000000) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000100)=0x7, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:24:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f00000004c0)) [ 272.723880][ T6734] input: syz1 as /devices/virtual/input/input97 04:24:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xc352) 04:24:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f00000004c0)) 04:24:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) [ 272.772693][ T6738] input: syz1 as /devices/virtual/input/input99 04:24:01 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f00000004c0)) 04:24:01 executing program 0: setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000180)=0x1, 0x4) r0 = socket(0x11, 0x0, 0x2) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000040)="e9e57a602cda885f6217d80d719793711d3c396559e92d0b2892f24a9e4aa7a8df5067e3cc74034d725c02dbf23ddd92356b220f19963cef4ff1fecb5d0a6a67b2ff4aad99a60bf40f0a8a97a87cba1de92e78931061dbb0d2c4dec75b2a03d2de19266bb2e74281d76d829987abb692a93ca4250ec5349a3197615b1046775a0bc6e3cd7a2226ed683e82f387b9bd5883cc4738782035d4f31eb5ce12603d", 0x9f) socket(0x15, 0x5, 0x80000000) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000100)=0x7, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 04:24:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x2001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)) [ 272.845921][ T6746] input: syz1 as /devices/virtual/input/input100 04:24:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 04:24:01 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:01 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001380)=""/228) [ 273.040873][ T6754] input: syz1 as /devices/virtual/input/input101 [ 273.105402][ T6760] input: syz1 as /devices/virtual/input/input102 04:24:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x2001}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg0\x00', 0x400}) 04:24:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 04:24:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 04:24:01 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 273.109588][ T6762] input: syz1 as /devices/virtual/input/input103 04:24:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:01 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) [ 273.151874][ T6766] input: syz1 as /devices/virtual/input/input104 04:24:01 executing program 1: r0 = add_key$user(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="92fe390dd9f73243be03b71ee44ead17058cbab69b64b04f0d483ea8f32b1a70065f57699873255a627acbf6e4f7ad26aea6956f7c5f280b41af56119f4679c11ad148e0a3b5aea1036d44817a6d5be322582fb26afcaf553f778e961ecdb1fa2a38251ca5b38ccd97273a8ea452938e7cfccf9af6bf6e1de6", 0x79, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="2ac135583d11dbee395e04cf35c76e0f383c485d9ed0ccb813f08ed8c9d7114d266d18e9d3352895ff3ecc6c6f2f1dc3eb9e4d7416a8931983dd39f5229b01ef503d2d77d3919fab8af31c8dcb9f6d5228877f12079ed17c7e3bc2d56a186368fdbf5f0556f2ab857e91dc6bef48ee11595b1257ac0efbc5e0b40f2a6b91935b340765e64f715954d1b08c2848130ac3656ed6d38177db3731911571ac56a1b352aacb53a9ca9ec46f78cdddd240fd0555b09006fdaec922f53fd6024be5b93f", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={'wp512\x00'}}) 04:24:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:01 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 04:24:01 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x0, 0x0}, 0x10) r0 = syz_usbip_server_init(0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) write$usbip_server(r0, &(0x7f0000003740)=ANY=[], 0x2f90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 04:24:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:01 executing program 0: r0 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="dc86697525f6d603c54cab72b310b94855be36e26dc3b72321d76b182a23325968c9dd7ae5b0416c0125f5182b6bfd1da5d41caf96103abf9560399a6c6746f77981ed7aa81c29ca2cef68b28dc5d5f609b9878d4cdea85d8c3c8dc6423a7824cc4db822de1449a88427a232d36bcce2d192638dbfb72b1aa25a532771a94cac0f99ddd93a3f98e997f00d3ba88c2b13db553c0e055bb82ba05bfe877d56fbf5228a4260d1db12fe552071820cf990a7df1aa10f57ad6643613c46ac4a107674", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)="fe", 0x1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="c9", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000007c0)={r1, r0, r2}, &(0x7f0000000100)=""/47, 0x2f, &(0x7f00000008c0)={&(0x7f0000000000)={'tgr128\x00'}}) [ 273.225152][ T6772] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 273.231337][ T6772] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 273.249895][ T6772] vhci_hcd vhci_hcd.0: Device attached [ 273.259954][ T6774] vhci_hcd: connection closed [ 273.263945][ T4821] vhci_hcd: stop threads [ 273.276601][ T4821] vhci_hcd: release socket [ 273.285757][ T4821] vhci_hcd: disconnect device 04:24:01 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x0, 0x0, 0xb1, '\x00', &(0x7f0000000040)}) 04:24:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) 04:24:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 273.419781][ T6781] could not allocate digest TFM handle tgr128 04:24:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 04:24:02 executing program 3: syz_mount_image$hfsplus(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540), 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{0x0, 0x0, 0xd4d}], 0x180022, &(0x7f0000000480)) 04:24:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="a9", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18}}], 0x18}}], 0x2, 0x0) 04:24:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}}, 0x0) 04:24:02 executing program 1: r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="2ac135583d11dbee395e04cf35c76e0f383c485d9ed0ccb813f08ed8c9d7114d266d18e9d3352895ff3ecc6c6f2f1dc3eb9e4d7416a8931983dd39f5229b01ef503d2d77d3919fab8af31c8dcb9f6d5228877f12079ed17c7e3bc2d56a186368fdbf5f0556f2ab857e91dc6bef48ee11595b1257ac0efbc5e0b40f2a6b91935b340765e64f715954d1b08c2848130ac3656ed6d38177db3731911571ac56a1b352aacb53a9ca9ec46f78cdddd240fd0555b09006fdaec922f53fd6024be5b93f", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={'crc32\x00'}}) 04:24:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 273.904966][ T6810] loop3: detected capacity change from 0 to 13 04:24:02 executing program 0: r0 = add_key$user(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="92fe390dd9f73243be03b71ee44ead17058cbab69b64b04f0d483ea8f32b1a70065f57699873255a627acbf6e4f7ad26aea6956f7c5f280b41af56119f4679c11ad148e0a3b5aea1036d44817a6d5be322582fb26afcaf553f778e961ecdb1fa2a38251ca5b38ccd97273a8ea452938e7cfccf9af6bf6e1de678ed164701108898c2dd1728310fcd7f5d583735355117c4224c6eac1a4796da2bc9043487b1a1aa3323", 0xa3, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="2ac135583d11dbee395e04cf35c76e0f383c485d9ed0ccb813f08ed8c9d7114d266d18e9d3352895ff3ecc6c6f2f1dc3eb9e4d7416a8931983dd39f5229b01ef503d2d77d3919fab8af31c8dcb9f6d5228877f12079ed17c7e3bc2d56a186368fdbf5f0556f2ab857e91dc6bef48ee11595b1257ac0efbc5e0b40f2a6b91935b340765e64f715954d1b08c2848130ac3656ed6d38177db3731911571ac56a1b352aacb53a9ca9ec46f78cdddd240fd0555b09006fdaec922f53fd6024be5b93f", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={'wp512\x00'}}) 04:24:02 executing program 3: r0 = add_key$user(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="92fe390dd9f73243be03b71ee44ead17058cbab69b64b04f0d483ea8f32b1a70065f57699873255a", 0x28, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="2ac135583d11dbee395e04cf35c76e0f383c485d9ed0ccb813f08ed8c9d7114d266d18e9d3352895ff3ecc6c6f2f1dc3eb9e4d7416a8931983dd39f5229b01ef503d2d77d3919fab8af31c8dcb9f6d5228877f12079ed17c7e3bc2d56a186368fdbf5f0556f2ab857e91dc6bef48ee11595b1257ac0efbc5e0b40f2a6b91935b340765e64f715954d1b08c2848130ac3656ed6d38177db3731911571ac56a1b352aacb53a9ca9ec46f78cdddd240fd0555b09006fdaec922f53fd6024be5b93f", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000780)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={'wp512\x00'}}) 04:24:02 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x2001}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 04:24:02 executing program 1: r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="2ac135583d11dbee395e04cf35c76e0f383c485d9ed0ccb813f08ed8c9d7114d266d18e9d3352895ff3ecc6c6f2f1dc3eb9e4d7416a8931983dd39f5229b01ef503d2d77d3919fab8af31c8dcb9f6d5228877f12079ed17c7e3bc2d56a186368fdbf5f0556f2ab857e91dc6bef48ee11595b1257ac0efbc5e0b40f2a6b91935b340765e64f715954d1b08c2848130ac3656ed6d38177db3731911571ac56a1b352aacb53a9ca9ec46f78cdddd240fd0555b09006fdaec922f53fd6024be5b93f", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={'crc32\x00'}}) 04:24:02 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 3: r0 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='3', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="dc86697525f6d603c54cab72b310b94855be36e26dc3b72321d76b182a23325968c9dd7ae5b0416c0125f5182b6bfd1da5d41caf96103abf9560399a6c6746f77981ed7aa81c29ca2cef68b28dc5d5f609b9878d4cdea85d8c3c8dc6423a7824cc4db822de1449a88427a232d36bcce2d192638dbfb72b1aa25a532771a94cac0f99ddd93a3f98e997f00d3ba88c2b13db553c0e055bb82ba05bfe877d56fbf5228a4260d1db12fe552071820cf990a7df1aa10f57ad6643613c46ac4a107674", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="97e5142c4e01ca760f532c2b1d72ac2a7062ef01d4ef74a347ae223b4fb7b088309b1dec7df8c9d7103f069729b98b77610000000100"/69, 0x45, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000007c0)={r0, r1, r2}, 0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={'wp256-generic\x00'}}) 04:24:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r0, 0x4}) 04:24:02 executing program 1: r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="2ac135583d11dbee395e04cf35c76e0f383c485d9ed0ccb813f08ed8c9d7114d266d18e9d3352895ff3ecc6c6f2f1dc3eb9e4d7416a8931983dd39f5229b01ef503d2d77d3919fab8af31c8dcb9f6d5228877f12079ed17c7e3bc2d56a186368fdbf5f0556f2ab857e91dc6bef48ee11595b1257ac0efbc5e0b40f2a6b91935b340765e64f715954d1b08c2848130ac3656ed6d38177db3731911571ac56a1b352aacb53a9ca9ec46f78cdddd240fd0555b09006fdaec922f53fd6024be5b93f", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={'crc32\x00'}}) 04:24:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x0) 04:24:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 1: r0 = add_key$user(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="2ac135583d11dbee395e04cf35c76e0f383c485d9ed0ccb813f08ed8c9d7114d266d18e9d3352895ff3ecc6c6f2f1dc3eb9e4d7416a8931983dd39f5229b01ef503d2d77d3919fab8af31c8dcb9f6d5228877f12079ed17c7e3bc2d56a186368fdbf5f0556f2ab857e91dc6bef48ee11595b1257ac0efbc5e0b40f2a6b91935b340765e64f715954d1b08c2848130ac3656ed6d38177db3731911571ac56a1b352aacb53a9ca9ec46f78cdddd240fd0555b09006fdaec922f53fd6024be5b93f", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={'crc32\x00'}}) 04:24:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x0) 04:24:02 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @default, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @bcast, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) [ 274.316444][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 274.316468][ T39] audit: type=1400 audit(1656735842.954:303): avc: denied { create } for pid=6855 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 04:24:02 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x0) 04:24:02 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000000)={0x0, 0x1, 0x800, {}, 0x0, 0xfe}) [ 274.347308][ T39] audit: type=1400 audit(1656735842.974:304): avc: denied { ioctl } for pid=6855 comm="syz-executor.3" path="socket:[42721]" dev="sockfs" ino=42721 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 04:24:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 04:24:03 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 04:24:03 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0x4, 0x0, 0x0) 04:24:03 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:03 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 04:24:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002800)={0x18, 0x3, &(0x7f0000002500)=@framed, &(0x7f0000002580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:24:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 04:24:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:03 executing program 1: syz_open_dev$hidraw(&(0x7f0000000480), 0x0, 0x80040) 04:24:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x84}}, 0x0) 04:24:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="03cb0700e8c349a70500000000000000dade6c363435eb62eac39090cd000023e398c68ba0a3cedd603308f6a10326", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703667726574617000000014000280080008000000000005000b0000000000"], 0x48}, 0x1, 0xb00}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40012}, 0x20040041) sendmsg$nl_route(r3, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000240)=@ipv4_getnexthop={0x28, 0x6a, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x8010) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg$unix(r6, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 04:24:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x84}}, 0x0) 04:24:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:03 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x84}}, 0x0) 04:24:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 274.633856][ T6896] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2], 0x84}}, 0x0) 04:24:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 274.814558][ T39] audit: type=1400 audit(1656735843.454:305): avc: denied { read } for pid=6889 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 04:24:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:04 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2], 0x84}}, 0x0) [ 275.470954][ T6912] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="03cb0700e8c349a70500000000000000dade6c363435eb62eac39090cd000023e398c68ba0a3cedd603308f6a10326", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703667726574617000000014000280080008000000000005000b0000000000"], 0x48}, 0x1, 0xb00}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40012}, 0x20040041) sendmsg$nl_route(r3, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000240)=@ipv4_getnexthop={0x28, 0x6a, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x8010) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg$unix(r6, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 04:24:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2], 0x84}}, 0x0) 04:24:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(0x0, r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB], 0x84}}, 0x0) 04:24:04 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB], 0x84}}, 0x0) 04:24:04 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) [ 275.626238][ T6932] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB], 0x84}}, 0x0) 04:24:05 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="03cb0700e8c349a70500000000000000dade6c363435eb62eac39090cd000023e398c68ba0a3cedd603308f6a10326", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703667726574617000000014000280080008000000000005000b0000000000"], 0x48}, 0x1, 0xb00}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40012}, 0x20040041) sendmsg$nl_route(r3, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000240)=@ipv4_getnexthop={0x28, 0x6a, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x8010) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg$unix(r6, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 04:24:05 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008"], 0x84}}, 0x0) [ 276.457545][ T6942] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:05 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 276.487406][ T6946] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. 04:24:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 276.502427][ T6946] must specify at least one socket 04:24:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008"], 0x84}}, 0x0) 04:24:05 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) gettid() [ 276.548128][ T6953] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.553964][ T6955] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 276.555810][ T6953] must specify at least one socket 04:24:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="03cb0700e8c349a70500000000000000dade6c363435eb62eac39090cd000023e398c68ba0a3cedd603308f6a10326", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703667726574617000000014000280080008000000000005000b0000000000"], 0x48}, 0x1, 0xb00}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40012}, 0x20040041) sendmsg$nl_route(r3, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000240)=@ipv4_getnexthop={0x28, 0x6a, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x8010) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg$unix(r6, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 04:24:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008"], 0x84}}, 0x0) 04:24:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 277.334745][ T6961] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.353143][ T6961] must specify at least one socket 04:24:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x0) 04:24:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffff"], 0x84}}, 0x0) 04:24:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x0) [ 277.403772][ T6970] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. 04:24:06 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) gettid() [ 277.413201][ T6970] must specify at least one socket 04:24:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x0) [ 277.462831][ T6978] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="03cb0700e8c349a70500000000000000dade6c363435eb62eac39090cd000023e398c68ba0a3cedd603308f6a10326", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703667726574617000000014000280080008000000000005000b0000000000"], 0x48}, 0x1, 0xb00}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40012}, 0x20040041) sendmsg$nl_route(r3, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000240)=@ipv4_getnexthop={0x28, 0x6a, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x8010) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg$unix(r6, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 04:24:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffff"], 0x84}}, 0x0) 04:24:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 04:24:06 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) gettid() [ 278.345401][ T6983] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. 04:24:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 278.351968][ T6983] must specify at least one socket 04:24:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffff"], 0x84}}, 0x0) 04:24:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 278.369269][ T6989] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 278.387292][ T6993] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 278.394787][ T6993] must specify at least one socket 04:24:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff08000100"], 0x84}}, 0x0) [ 278.424999][ T6996] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 278.431922][ T6996] must specify at least one socket 04:24:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="03cb0700e8c349a70500000000000000dade6c363435eb62eac39090cd000023e398c68ba0a3cedd603308f6a10326", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703667726574617000000014000280080008000000000005000b0000000000"], 0x48}, 0x1, 0xb00}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40012}, 0x20040041) sendmsg$nl_route(r3, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000240)=@ipv4_getnexthop={0x28, 0x6a, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x8010) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg$unix(r6, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 04:24:07 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x84}}, 0x0) 04:24:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff08000100"], 0x84}}, 0x0) 04:24:07 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) tkill(0x0, 0x1000000000016) [ 279.330100][ T7004] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.334919][ T7003] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 279.338419][ T7004] must specify at least one socket 04:24:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x84}}, 0x0) 04:24:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff08000100"], 0x84}}, 0x0) [ 279.379945][ T7012] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 04:24:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x84}}, 0x0) [ 279.387729][ T7012] must specify at least one socket 04:24:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000"], 0x84}}, 0x0) [ 279.417529][ T7018] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.424535][ T7018] must specify at least one socket 04:24:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="03cb0700e8c349a70500000000000000dade6c363435eb62eac39090cd000023e398c68ba0a3cedd603308f6a10326", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703667726574617000000014000280080008000000000005000b0000000000"], 0x48}, 0x1, 0xb00}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40012}, 0x20040041) sendmsg$nl_route(r3, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000240)=@ipv4_getnexthop={0x28, 0x6a, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}}, 0x8010) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg$unix(r6, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x0, 0x10}}], 0x1, 0x0, 0x0) 04:24:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000"], 0x84}}, 0x0) 04:24:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2], 0x84}}, 0x0) 04:24:08 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) tkill(0x0, 0x1000000000016) [ 280.295947][ T7024] must specify at least one socket [ 280.307059][ T7028] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000"], 0x84}}, 0x0) 04:24:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2], 0x84}}, 0x0) [ 280.329182][ T7031] must specify at least one socket 04:24:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2], 0x84}}, 0x0) 04:24:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff08000100000000004400"], 0x84}}, 0x0) [ 280.362127][ T7036] must specify at least one socket 04:24:09 executing program 3: clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe30b0000, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48000000100005"], 0x48}}, 0x0) 04:24:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB], 0x84}}, 0x0) 04:24:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff08000100000000004400"], 0x84}}, 0x0) 04:24:09 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) tkill(0x0, 0x1000000000016) [ 281.310005][ T7046] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 281.316220][ T7045] must specify at least one socket 04:24:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB], 0x84}}, 0x0) 04:24:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff08000100000000004400"], 0x84}}, 0x0) 04:24:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB], 0x84}}, 0x0) [ 281.366768][ T7052] must specify at least one socket 04:24:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008"], 0x84}}, 0x0) [ 281.400401][ T7058] must specify at least one socket 04:24:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:10 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000200)=@framed={{}, [@btf_id, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0xab, &(0x7f00000002c0)=""/171, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:24:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008"], 0x84}}, 0x0) [ 281.891912][ T7063] __nla_validate_parse: 4 callbacks suppressed [ 281.891925][ T7063] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.903752][ T7063] must specify at least one socket 04:24:10 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000140000000c000180"], 0x28}}, 0x0) 04:24:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008"], 0x84}}, 0x0) [ 282.162729][ T7068] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.171098][ T7068] must specify at least one socket 04:24:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 282.177031][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 04:24:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffff"], 0x84}}, 0x0) [ 282.177807][ T7072] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:10 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000002c0)=""/208, 0x1000000, 0xd0, 0x1}, 0x20) [ 282.205742][ T7076] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. 04:24:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 282.213407][ T7076] must specify at least one socket 04:24:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffff"], 0x84}}, 0x0) 04:24:11 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:11 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000024000b0f000003000000000000000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010063616b65"], 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000006, 0x0) [ 283.024654][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 283.033440][ T7087] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.035058][ T7089] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private2, @mcast1, @mcast2, 0x0, 0x3ff}) [ 283.041439][ T7087] must specify at least one socket 04:24:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffff"], 0x84}}, 0x0) 04:24:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 283.070821][ T39] audit: type=1400 audit(1656735851.704:306): avc: denied { ioctl } for pid=7092 comm="syz-executor.3" path="socket:[45215]" dev="sockfs" ino=45215 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.075972][ T7096] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.097305][ T7096] must specify at least one socket 04:24:12 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000004}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) close(r0) openat$cgroup(r2, 0x0, 0x200002, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 04:24:12 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff08000100"], 0x84}}, 0x0) 04:24:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 283.883713][ T7104] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.892453][ T7107] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 283.895247][ T7104] must specify at least one socket 04:24:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff08000100"], 0x84}}, 0x0) 04:24:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 283.932048][ T7111] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.940196][ T7111] must specify at least one socket 04:24:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff08000100"], 0x84}}, 0x0) 04:24:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 283.976704][ T7118] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.988400][ T7118] must specify at least one socket 04:24:12 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000004}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) close(r0) openat$cgroup(r2, 0x0, 0x200002, 0x0) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 04:24:13 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000"], 0x84}}, 0x0) 04:24:13 executing program 3: r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 284.749525][ T7127] must specify at least one socket 04:24:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8400", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000"], 0x84}}, 0x0) 04:24:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8400", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 284.782522][ T7136] must specify at least one socket 04:24:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000"], 0x84}}, 0x0) [ 284.816581][ T7142] must specify at least one socket 04:24:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8400", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:14 executing program 3: r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7}, 0x14) 04:24:14 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff08000100000000004400"], 0x84}}, 0x0) [ 285.607194][ T7145] must specify at least one socket 04:24:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff08000100000000004400"], 0x84}}, 0x0) 04:24:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 285.643554][ T7153] must specify at least one socket 04:24:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x100}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) 04:24:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff08000100000000004400"], 0x84}}, 0x0) 04:24:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b44b2000000000000c00080008000000000000000c000300fafeffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 285.704177][ T7162] must specify at least one socket 04:24:15 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000001c0)="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", 0x5ad, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r0) 04:24:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, &(0x7f0000000200)="a1", 0x1, 0x0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) 04:24:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000100)="756b2d628d94b0232861a9bc5753d6b0a48a", 0x12}, {&(0x7f0000000140)="95598b3b73f08484fab0d13889b260cbfd609250d15a132bbc9fb5825b3583ed687c612169779943d45854efc2482aff6448347d625540df89ac70f5d5e8442eabff2496d53afd69bdc79dc9189c3934bf918c2b153b14fb0bd8c1aa0ea0ab04368e415abb1faa65990340eb155c923247c465ebf401e768a7b6e312fc6561ae72c1ed51e0f5056f30197acec90f741432e36065573ceefe284e4a9e52f8b0f762ca23b54f9616bc37725f55645b2ccb80d7f7da1b8bf01cbc5059976805241c0e9ca4cc442e1c", 0xc7}, {&(0x7f0000000240)="8f0c69865b8d1b2498bec6a4ce85f74ba29cbd8a019280be7ffcc357ad06d010c02cd454cd6c0a7b7ff3cd37b053158aa68350413535fe1030f3d5e91ec966b9573ef888510c659599c248d53e09bc888ec351f89637a499f6e4bb7eb3866d0d0e4cda2d18a3d8be6f476ddc74e9412f356b76c7d1143e6029193721c2bddce2594e3f2b424a293d892db7", 0x8b}, {&(0x7f00000003c0)="b7b8b7ecd2898f1a8f719b62c7e7509d807f9d622ef48e86afdb93d97f69de2535a445c6992c6d43bf0d94855496284bf5b9075fa0385beed9d3864b5a0b7ba8685c7ad324556f7114be0367b23d600bbaafa50e55018a69fd7b8b8ef1d46046a0fbf9e5b602ffc19e67a34bb680314a855238390e3d266fc6b84284d5514b605b257660e30e5dbfd8864b6491cf2a313a1376fbee8b99ba3435748114b59509bacb544e69cdc095eda40c72863260a864fd0384a9057703f20ea6c80edbcbe05a0d875f29e722304a53603392eba398ad6594fb397a5967a7156ca3748846a0", 0xe0}, {&(0x7f00000004c0)="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", 0xe9d}], 0x5}, 0x0) 04:24:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:15 executing program 2: r0 = socket$inet6(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 04:24:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10}, 0x10) 04:24:15 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(0xffffffffffffffff, r0) r1 = gettid() tkill(r1, 0x1000000000016) 04:24:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 04:24:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000000c0), 0x88) 04:24:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:16 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xfffffffffffffe95, 0x1c, 0x3}, 0x1c) 04:24:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1}, 0x0) 04:24:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:16 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(0xffffffffffffffff, r0) r1 = gettid() tkill(r1, 0x1000000000016) 04:24:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:16 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) 04:24:16 executing program 3: setitimer(0x0, &(0x7f0000000000)={{}, {0x0, 0x80000000000ff}}, 0x0) [ 288.185080][ T39] audit: type=1400 audit(1656735856.824:307): avc: denied { create } for pid=7203 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 04:24:16 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) [ 288.201625][ T39] audit: type=1400 audit(1656735856.824:308): avc: denied { ioctl } for pid=7203 comm="syz-executor.2" path="socket:[46140]" dev="sockfs" ino=46140 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 04:24:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) 04:24:16 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) [ 288.350372][ T39] audit: type=1804 audit(1656735856.984:309): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2224295660/syzkaller.tyN8ix/348/bus" dev="sda1" ino=1151 res=1 errno=0 [ 288.377350][ T39] audit: type=1800 audit(1656735856.984:310): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1151 res=0 errno=0 04:24:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:17 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) 04:24:17 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(0xffffffffffffffff, r0) r1 = gettid() tkill(r1, 0x1000000000016) 04:24:17 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) 04:24:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) 04:24:17 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:17 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) 04:24:17 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) [ 289.215201][ T39] audit: type=1804 audit(1656735857.854:311): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2224295660/syzkaller.tyN8ix/349/bus" dev="sda1" ino=1146 res=1 errno=0 [ 289.236291][ T39] audit: type=1800 audit(1656735857.854:312): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1146 res=0 errno=0 04:24:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:18 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) 04:24:18 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1000000000016) 04:24:18 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) [ 289.933194][ T7248] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) 04:24:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8400", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:18 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) 04:24:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8400", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8400", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 290.102354][ T39] audit: type=1804 audit(1656735858.734:313): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2224295660/syzkaller.tyN8ix/350/bus" dev="sda1" ino=1151 res=1 errno=0 [ 290.121834][ T39] audit: type=1800 audit(1656735858.734:314): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1151 res=0 errno=0 04:24:19 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1000000000016) 04:24:19 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) 04:24:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 290.786290][ T7269] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x1800) lseek(r3, 0x200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x1dd00) 04:24:19 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) 04:24:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) 04:24:19 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002040)={'erspan0\x00', &(0x7f0000001f40)=@ethtool_drvinfo={0x3, "506f858df7dc2703e92831fc30bccca19d9d783174a74d625849d3d5e535a73d", "2270a22893fc0634088a7c2d9917157f4f98ee157052b0f90f08edaa458803b1", "b80e5246dda3516195cf0c5abd1e055e025c61a725b9b865f62cf3b2e49aa62e", "5c26d884924cbba92c41bb3d785ebb3f7a40698b3dc5a028656dc07050abbf5a", "6f6206808d7a11c5023e0dd67dd465b2056a86d99dd69a8ce80ac1055fde96e2", "eb8765434b0be7011a83676b"}}) 04:24:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25010000000c000200b4000000000000000c00080008000000000000000c000300faffffffffffffff0800010000000000440007"], 0x84}}, 0x0) [ 290.998768][ T39] audit: type=1804 audit(1656735859.634:315): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2224295660/syzkaller.tyN8ix/351/bus" dev="sda1" ino=1146 res=1 errno=0 [ 291.020262][ T39] audit: type=1800 audit(1656735859.634:316): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1146 res=0 errno=0 04:24:20 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 04:24:20 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r0, 0xffffffffffffffff) r1 = gettid() tkill(r1, 0x1000000000016) 04:24:20 executing program 0: semget(0x2, 0x0, 0x401) [ 291.641230][ T7288] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:20 executing program 0: shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) 04:24:20 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 04:24:20 executing program 0: msgget(0x0, 0x302) 04:24:20 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 04:24:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = accept$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000007c0)={0x0, @multicast2, @remote}, &(0x7f0000000800)=0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_devices(r3, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) gettid() rt_tgsigqueueinfo(0x0, 0x0, 0x25, &(0x7f0000000100)) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000000c0)=""/22) r4 = getuid() setreuid(r4, r4) ptrace(0x4207, 0x0) getegid() fcntl$getown(r0, 0x9) 04:24:20 executing program 0: r0 = msgget(0x3, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0xee00}}) [ 291.879396][ C3] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 04:24:21 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:21 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002040)={'erspan0\x00', 0x0}) 04:24:21 executing program 0: r0 = io_uring_setup(0x20e7, &(0x7f0000000040)) r1 = io_uring_setup(0x20e7, &(0x7f0000000040)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x3, 0x0, r2) 04:24:21 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x7ffffffffffff800}]}) 04:24:21 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x541e) 04:24:21 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002040)={'erspan0\x00', 0x0}) [ 292.504817][ T7310] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:21 executing program 3: ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 04:24:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x0) 04:24:24 executing program 3: syz_mount_image$hfsplus(0x0, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540), 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2e100, 0x0) 04:24:24 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="db5f26fd1caca30791589f2b2793b761a435669c479ea5bf6b1e52145479aee5a947a3c83db53f42546f107fec2c50c493efd5aed125e1bf181608b99289af9bacd52e2bace229aadd4361d9e83c9743bd0fcdd3661dfece9085557e7e6edf8e93f946010bb8b253431243d24d0613fb43b79e8d145bd9db1d2dda8463d30d952920f26da3e59e757653d0f04987ad653d0e6bbc12a09f757ed57bebeccb19feeacca584b45975f369d3a4b0a21963ced5715176d639d3b67a327ef1e43a77514cf936a7218a3391cc0ff55c41f1fe", 0xcf}, {&(0x7f0000000980)="3f93e3c2b6ed3925802979db22f56cb4736fe77571f4cb6ecf8ba2fd90416de3701bf9751dd2c372261934d230dfd08f8d1e586261ec796c1417ba9fca38096122362526dd10229a1bca0b6adc6cdbe62d4b4dd51b400bc36bc29580754a6356c10b21da669d71df4f0ff005e7c97ed66ecba4bd5cd6f63d892ca9c88d888bc7be13e1967f5ad63dd3b0c07a64311b3555e39fa7c4c0b96dd38213cc", 0x9c}, {&(0x7f0000000a40)="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", 0xfa}, {&(0x7f0000000b40)="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", 0x8e4}], 0x4}, 0x0) 04:24:24 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:24 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002040)={'erspan0\x00', 0x0}) 04:24:24 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@call]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xcc, &(0x7f0000000100)=""/204, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:24:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="db5f26fd1caca30791589f2b2793b761a435669c479ea5bf6b1e52145479aee5a947a3c83db53f42546f107fec2c50c493efd5aed125e1bf181608b99289af9bacd52e2bace229aadd4361d9e83c9743bd0fcdd3661dfece9085557e7e6edf8e93f946010bb8b253", 0x68}, {&(0x7f0000000980)="3f93e3c2b6ed3925802979db22f56cb4736fe77571f4cb6ecf8ba2fd90416de3701bf9751dd2c372261934d230dfd08f8d1e586261ec796c1417ba9fca38096122362526dd10229a1bca0b6adc6cdbe62d4b4dd51b400bc36bc29580754a6356c10b21da669d71df4f0ff005e7c97ed66ecba4bd5cd6f63d892ca9c88d888bc7be13e1967f5ad63dd3b0c07a64311b3555e39fa7c4c0b96dd38213cc", 0x9c}, {&(0x7f0000000a40)="4d99a5a42d838c4c1e74c8ed40895607e26437de21ab939a2b05bcb66a8c4ece76532640349d4a79505c078446f114da1a29b9ad47c311f3d328728ab2b4b6dbc2a064f4bd3069ff6a1afe90e7c6b1bc4cca7086704568f33f809998c0058c4034ee03c1afe5860c5a63cdbe2fb1b5a89daa3a54cd355f88e661d267801ea6060ed9146808634f1f86b55ef8c6462364d9c7711dceca3501538c2ced8c71d2b1d2438312e077dbd6df4632c4a61b7e04d3fb08ea96692e803048413d38f86200dd52e40dc7a493a5eeb1a618c3764fc8fc98e1afd1c4696806729e4927e030cde884500683cc5ea670f4fcc23c9768e8b1c4dbbf849e10b27568", 0xfa}, {&(0x7f0000000b40)="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", 0x3af}], 0x4}, 0x0) [ 295.553322][ T7328] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000), 0x4) 04:24:24 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4053bae6e54b89fb, 0xffffffffffffffff, 0x0) 04:24:24 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60001e00000c2c0027ead8068170279cce03000000aac4dfff020000000000000800000000000001850090"], 0x0) 04:24:24 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@remote, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @broadcast, @broadcast}}}}, 0x0) 04:24:27 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @random="7029ea21ab7a", @val, {@ipv6}}, 0x0) 04:24:27 executing program 3: madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) 04:24:27 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000000c0)=""/147, 0x26, 0x93, 0x1}, 0x20) 04:24:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000001880)=""/197, 0x2e, 0xc5, 0x1}, 0x20) 04:24:27 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xb, [@datasec={0x9, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x401}], "f4"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'L'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "d7c4"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000300)=""/211, 0x57, 0xd3, 0x1}, 0x20) [ 298.570094][ T7351] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:27 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0xb9, &(0x7f0000000240)=""/185, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:24:27 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1a, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000001000)=""/251, 0x32, 0xfb, 0x1}, 0x20) 04:24:27 executing program 3: syz_clone(0x25000200, 0x0, 0x0, 0x0, 0x0, 0x0) 04:24:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000010c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000015c0)="06bddfd138dec719e89912aa0f91", 0xe, 0x0, &(0x7f00000016c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 04:24:30 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x989680}, &(0x7f00000005c0)={&(0x7f0000000580), 0x8}) 04:24:30 executing program 0: openat$vhost_vsock(0xffffff9c, &(0x7f0000001540), 0x2, 0x0) 04:24:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) write$evdev(r0, 0x0, 0x0) 04:24:30 executing program 1: timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:30 executing program 3: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) open$dir(&(0x7f0000000000)='./file0\x00', 0x470103, 0x0) [ 301.592982][ T7373] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:30 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, &(0x7f0000000040)=""/197, 0x26, 0xc5, 0x1}, 0x20) 04:24:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="03a4957c42b7131fc2f7d2560806", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 04:24:30 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000001380)=[{0x0, 0x0, 0xa6e2}]) 04:24:30 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)={[{@mode}, {@huge_never}, {@size={'size', 0x3d, [0x0]}}]}) 04:24:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x22, &(0x7f0000000000), 0x14) [ 301.639413][ T7382] tmpfs: Bad value for 'size' 04:24:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9e) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x29, 0x12, 0x0, 0x4) 04:24:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x25, 0x0, 0x0) 04:24:33 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x84, 0x0, 0x0) 04:24:33 executing program 1: timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24c0, 0x0) ioctl$RNDZAPENTCNT(r0, 0xc020662a, 0x0) 04:24:33 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\xf4\xc3\xd5\xdf\xb7\x13\x82>Y[') 04:24:33 executing program 2: select(0x5, &(0x7f0000000200), 0x0, &(0x7f0000000280)={0x8}, &(0x7f00000002c0)={0x77359400}) 04:24:33 executing program 3: syz_clone(0xc880a000, 0x0, 0x4f, 0x0, 0x0, 0x0) [ 304.625864][ T7396] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x80) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)) 04:24:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}], 0x1c) 04:24:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24c0, 0x0) ioctl$RNDZAPENTCNT(r0, 0xc0c0583b, 0x0) 04:24:36 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000f9ff000400200007000000", @ANYRES32, @ANYBLOB="000000000a0002"], 0x28}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) 04:24:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xe) 04:24:36 executing program 1: timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:36 executing program 3: syz_clone(0xc880a000, 0x0, 0x4f, 0x0, 0x0, 0x0) 04:24:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x9e) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x29, 0x1a, 0x0, 0x4) 04:24:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@ra={0x94, 0x4}]}}}}}) [ 307.646930][ T7418] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000000280)="4103092c1116480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 04:24:36 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r0, 0x29, 0x43, 0x0, 0x0) 04:24:36 executing program 2: openat2(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x200080, 0x8}, 0x18) 04:24:36 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200100, 0x0) 04:24:39 executing program 3: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x4141, 0x0) 04:24:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000240), 0x4) 04:24:39 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r0, 0x29, 0x39, 0x0, 0x0) 04:24:39 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:39 executing program 2: r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x9, 0x1800}, {}, {}], 0x3, &(0x7f0000000040)) 04:24:39 executing program 0: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x80060, &(0x7f0000001600)) 04:24:39 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:39 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r0, 0x29, 0x3a, 0x0, 0x0) 04:24:39 executing program 1: timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000480)="0f60f926e0e86c7b", 0x8}, 0x68) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3ff16396754b761d471a79a153bd5104a24b2cc573ecc50d5ad08ccc82de1e118f8e2a18aa6114c642f8e020559d928d189ee8681a017a", @ANYRESHEX, @ANYBLOB="93cdd94e7e604bf6420c15754ce167157d3c6de79349d6f6ebd960dbb00c9381313209a0e7f7a2e9bece79b9d0df3b52f3d7d6a9a2ca82aeee43e13da3016fb3e1feae99df31eb48feb48e9f9d4bf5780a0ba5f62e360860fbbfb211fb6cd4a75ded10d8b9048ec2db14c3db4c238d8735cc56e136fae9e9566987f540a6"]) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x400) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 04:24:39 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 04:24:39 executing program 1: timer_create(0x0, &(0x7f0000000180), &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) [ 310.731471][ T7460] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:39 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 04:24:39 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 04:24:39 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 04:24:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000000480)="0f60f926e0e86c7b", 0x8}, 0x68) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:39 executing program 2: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000002c0)=""/87, &(0x7f0000000480)=""/72}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x56, 0x1, 0x3, 0x1, 0x1, 0x3c, {0x9, 0x21, 0xffc0, 0x1, 0x1, {0x22, 0x4b1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xd4, 0x80}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x2, 0x5, 0x1, 0xff, 0x9}, 0x34, &(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x80c}}, {0xc1, &(0x7f0000000900)=ANY=[@ANYBLOB="c103c023fff142085bf7e98180c8f50e98ba8607bd80dd552386e254316a1d486bc6d6449c026390901c9ff969ea0e1b63ba9b4a110c47386c6ba1c35744cc28ce9756199e295375f17c2f96837c6b674a922d6809b19a7ec4aef0b09bdcad9cc04de5d317022dd77970437d7f2c9ca7f9d6d6cf36e6a1811b8c1047a0455311a58300b81df75fd511fff764653c7b2255adab40a1aa4decab82785f3c797bacd6344910c2d9a15ea3b9bb250f30bd3d5a27e602b17d29aa76bffcdd04a939e419d97bb755646fa4a95451b95a434f87a153dc9c6ff9f95bcc804f9f5114e29b4784f637dce53cc4431eb64d96ef441c034498b8d2dd90a595110889a7dd71178431279351d51cf6ac950813853a0da17cfb102fca643f0d82c6f1a757e05a0ff5e71334d0561ee45a1cccc8116d5ab6d3268fafd6e1866a09abd872426f3f5eb8e5121e0c6d2887c8e39d49d5100b546a580b30116f762ac52515f7ce3e670bd03fb916"]}]}) 04:24:40 executing program 0: syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402e6188daf3ccc8f64a70aae3f82bc7fc25b0108f5f0ab8b608227b41ccc15689d041c87c3c8b044aa498796ecf92e616de212d646ddd60314b04a0fe1225ef54ee32083bf46bb7035fb2530d0384ae8de042bb89c21973540462ba61d6a1bbae1934bd1c998f667456b3daebe68a63931a4046fa26023c383ce8a2bec"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000080)=ANY=[]) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/87, &(0x7f0000000480)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x2004) 04:24:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x1, 0x0, 0x0, {}, [""]}, 0x14}}, 0x0) [ 311.614448][ T7480] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 311.620539][ T7480] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 311.623346][ T174] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 311.873337][ T174] usb 7-1: Using ep0 maxpacket: 8 [ 311.873358][ T5496] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 312.056738][ T174] usb 7-1: unable to get BOS descriptor or descriptor too short [ 312.139195][ T174] usb 7-1: config 1 interface 0 has no altsetting 0 [ 312.253427][ T5496] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 312.262685][ T5496] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 312.270899][ T5496] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 312.278721][ T5496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 312.313376][ T174] usb 7-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 312.320184][ T174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.326145][ T174] usb 7-1: Product: syz [ 312.328719][ T174] usb 7-1: Manufacturer: ⏀ࡂ臩좀໵몘ކ肽嗝蘣哢樱䠝왫䓖ʜ遣Ა烈ᬎ멣䪛఑㡇歬쎡䑗⣌韎ᥖ⦞畓糱阯粃杫鉊栭넉纚껄냰鲭䷀폥ȗ휭灹絃ⱿꞜ훹쿖膡谛䜐䖠ᅓ莥렀핟１擷㱥≻굕䂫ꪡ芫彸礼걻㓖၉庡릣▻』㶽❚˦綱ꨩ뽶꤄ [ 312.348011][ T174] usb 7-1: SerialNumber: syz [ 312.432710][ T7480] syz-executor.3 (7480) used greatest stack depth: 21976 bytes left [ 312.543321][ T5496] usb 5-1: string descriptor 0 read error: -22 [ 312.548722][ T5496] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 312.556141][ T5496] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.564831][ T5496] usb 5-1: config 0 descriptor?? [ 312.583708][ T7482] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 312.605813][ T5496] hub 5-1:0.0: bad descriptor, ignoring hub [ 312.610486][ T5496] hub: probe of 5-1:0.0 failed with error -5 [ 312.619157][ T5496] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input105 [ 312.817449][ T5496] usb 5-1: USB disconnect, device number 13 [ 312.863832][ T174] usbhid 7-1:1.0: can't add hid device: -71 [ 312.869115][ T174] usbhid: probe of 7-1:1.0 failed with error -71 [ 312.875822][ T174] usb 7-1: USB disconnect, device number 11 04:24:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000000640)="200000008e00000019100000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000ff0000000b0000000004000008514000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000000080)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup3(r1, r0, 0x0) 04:24:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3ff16396754b761d471a79a153bd5104a24b2cc573ecc50d5ad08ccc82de1e118f8e2a18aa6114c642f8e020559d928d189ee8681a017ab625e182c06423b4f5694759c1a442d29b9426bde16ec3ce0515d3fbdd274a308b50024d8146b30ca0278bd53c6d337f73a47fa9c98db4", @ANYBLOB="93cdd94e7e604bf6420c15754ce167157d3c6de79349d6f6ebd960dbb00c9381313209a0e7f7a2e9bece79b9d0df3b52f3d7d6a9a2ca82aeee43e13da3016fb3e1feae99df31eb48feb48e9f9d4bf5780a0ba5f62e360860fbbfb211fb6cd4a75ded10d8b9048ec2db14c3db4c238d8735cc56e136fae9e9566987f540a6"]) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x400) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 04:24:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x1, 0x0, 0x0, {}, [""]}, 0x14}}, 0x0) 04:24:42 executing program 1: timer_create(0x0, &(0x7f0000000180), &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) [ 313.763440][ T7489] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 313.771871][ T7489] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 04:24:42 executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x400) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 313.780767][ T7492] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:42 executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x400) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 04:24:42 executing program 0: sched_setscheduler(0x0, 0x1, &(0x7f0000001700)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x400) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 04:24:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 04:24:45 executing program 1: timer_create(0x0, &(0x7f0000000180), &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 04:24:45 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001b00)=ANY=[@ANYBLOB="620af8ff0c208e8bbfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955391c4ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a07009da17a0faf60fd6ad9b97aa5fa28480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97000b0940985a690c076c3b203b4eae76fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9f873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7afc6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210dddb2eb92d6a97a27602b97f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a2361f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8edbf0d294ac2a87b700945cadcc8d3726602111b40e761fd2100c920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751a17d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8c71d42645288d7226bbe9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9030000000000000047613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86969cdbbb6d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df02000000ef0ebb5000000000006065d6735eb7a00e127cee29d6cdff8dce1f06770c8714cc9c25859648776fe574b4e7fef6d7a8f11888b46e0adb62bfeacb4092e0ffb8c9df04476ddd4f5fce6e89258bbbabf8d03a2101a86d05848f0267f232aa40b77efa4d1ccc1bf7f44923f652cd8d9e350264b9e994fed0c496d52d2570c5ceb0d71627dc703d869fe464a8f6b8b264f2ef344ccd68d6720e5df2613517f8ee016558c0d321012e6cb59e5e92b22a8602b2b221ca256aeba64724c86c915f82f219819977818af4f26fbcac62d952baf4ea23945852ffcafed175381e98452e9f49b29fb9bf701bade61d69cf73029055bd301b407e6c7958bdc56714e3586936af137212e0287ae9d9ecd5a84503aceeb731ec854f33db75d3bfe89a2fe5594c5e9ab5f82399883416eb942c5540d78c1a8146355121c74a811f487acd395c2c759d4306b403ab502e7e66bce5f8b71f45bc250d14cbaeebe987b706c7fc84b5e59825e64a08dcb0dd5e7543fa2f610b8b691f9d8613740bdb4528836a5a6ddbd7b35efc45989b5da1e15cb19116db569b72a88b837042852bdf6398709777ca065d924726d0f4dbc292bffdbb05ef3e06ca8899af6a648d531042abdf46986e73841cd3b5a5187ea1efd00230b86d69f3f8bc5f510b0498525d8eb54c15d44bcff80502423bff2c243e51d402a28eac029d3b87fe8463936ff995325a1a1f72f4e3453d0a60cb5b668055502285e4899be4bf71201fd906ae89b359e462e2d72df62d102e8a1103f87e939ea5abce56fd2f20be0e70dff4c5e08ba873775dd36337e69a6f01183922a56d239a06c6294319c9de469698d9a1c5914db140adde3aa93817a92607915a05ae4ef8ee5fc74947e4ab3a504e1309dc27c4033fd4396cdd595e74f9c7d55195c9bd1000b1124e5d33232d74e9de5e204081f3"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) utimes(0x0, 0x0) 04:24:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_MAP={0x24}]}, 0x44}}, 0x0) [ 316.788180][ T7509] __nla_validate_parse: 3 callbacks suppressed [ 316.788200][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 316.807570][ T7512] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:45 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000800)=@string={0x2}}, {0x0, 0x0}]}) 04:24:45 executing program 0: sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) getpgid(0x0) prlimit64(0x0, 0x2, 0x0, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') read$FUSE(r3, &(0x7f0000004440)={0x2020}, 0x2020) 04:24:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc}]}, 0x34}}, 0x0) 04:24:45 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x14090131) [ 317.143354][ T5496] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 317.403194][ T5496] usb 7-1: Using ep0 maxpacket: 16 [ 317.543478][ T5496] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 317.552013][ T5496] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 317.560744][ T5496] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.623503][ T5496] usb 7-1: language id specifier not provided by device, defaulting to English [ 317.806760][ T1352] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.811092][ T1352] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.973248][ T5496] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.978916][ T5496] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.984275][ T5496] usb 7-1: Product: syz [ 317.986887][ T5496] usb 7-1: SerialNumber: syz [ 318.314479][ T5496] usb 7-1: 0:2 : does not exist [ 318.339437][ T5496] usb 7-1: USB disconnect, device number 12 [ 318.375408][ T7484] udevd[7484]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 04:24:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000000640)="200000008e00000019100000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000ff0000000b0000000004000008514000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000000080)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x101042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x208e24b) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0'}, 0xb) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 04:24:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3ff16396754b761d471a79a153bd5104a24b2cc573ecc50d5ad08ccc82de1e118f8e2a18aa6114c642f8e020559d928d189ee8681a017ab625e182c06423b4f5694759c1a442d29b9426bde16ec3ce0515d3fbdd274a308b50024d8146b30ca0278bd53c6d337f73a47fa9c98db4", @ANYBLOB="93"]) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 04:24:48 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3ff16396754b761d471a79a153bd5104a24b2cc573ecc50d5ad08ccc82de1e118f8e2a18aa6114c642f8e020559d928d189ee8681a017ab625e182c06423b4f5694759c1a442d29b9426bde16ec3ce0515d3fbdd274a308b50024d8146b30ca0278bd53c6d337f73a47fa9c98db4", @ANYBLOB]) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) [ 319.837716][ T7534] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:49 executing program 0: r0 = socket(0x2, 0x2, 0x1) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 04:24:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000ac0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:24:49 executing program 3: lstat(0x0, 0x0) syz_mount_image$udf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), 0x0, 0x0, 0x1, &(0x7f0000001400)=[{0x0, 0xf0ff1f}], 0x0, &(0x7f00000014c0)={[{@uid_ignore}]}) [ 320.703493][ T39] audit: type=1400 audit(1656735889.344:317): avc: denied { create } for pid=7539 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 04:24:49 executing program 0: r0 = socket(0x1, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000002a80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18}], 0x18}], 0x1, 0x0) 04:24:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000ac0)=[@transaction={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:24:49 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x40086602, &(0x7f0000001800)={'gre0\x00', 0x0}) [ 320.731535][ T39] audit: type=1400 audit(1656735889.354:318): avc: denied { write } for pid=7539 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 320.750638][ T7547] binder: BC_ACQUIRE_RESULT not supported [ 320.754973][ T7547] binder: 7546:7547 ioctl c0306201 20000c00 returned -22 04:24:49 executing program 2: syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)={[{@mode={'mode', 0x3d, 0xf02b0000}}]}) [ 320.769520][ T39] audit: type=1400 audit(1656735889.394:319): avc: denied { setattr } for pid=7548 comm="syz-executor.3" path="socket:[46493]" dev="sockfs" ino=46493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 04:24:51 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='limits\x00') read$FUSE(r0, 0x0, 0x0) 04:24:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 04:24:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000000140)="959d3438708741e2", 0x8, 0x9}, {0x0, 0x0, 0x80000001}], 0x0, &(0x7f0000000400)) 04:24:51 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) [ 322.863551][ T7559] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) read$eventfd(r0, 0x0, 0x0) 04:24:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) 04:24:51 executing program 3: r0 = socket(0x28, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) 04:24:51 executing program 2: r0 = socket(0x1, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f0000000100)={'batadv_slave_1\x00'}) 04:24:51 executing program 0: syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x2000, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)) 04:24:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r0, 0x70, 0x0, 0x3f) [ 322.891246][ T39] audit: type=1400 audit(1656735891.524:320): avc: denied { write } for pid=7564 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 04:24:54 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:54 executing program 2: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="99", 0x1, 0xfffffffffffffffd) 04:24:54 executing program 0: ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000580)) 04:24:54 executing program 3: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="f1", 0x1, 0xfffffffffffffffc) 04:24:54 executing program 3: syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x38, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)}, {0x0}, {0x0}, {0x0, 0x0, 0xfff}], 0x0, &(0x7f00000003c0)={[{@longad}], [{@smackfstransmute={'smackfstransmute', 0x3d, ':&[#+%$&]-'}}, {@appraise}, {@subj_user}]}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "e9e67e8f94ae44612118e36a81d1ce71a34d9c1feb0e4dbdcd6a9cc44b733a57"}) 04:24:54 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x7040, 0x0) [ 325.912205][ T7581] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 325.926734][ T39] audit: type=1400 audit(1656735894.564:321): avc: denied { read } for pid=7582 comm="syz-executor.2" name="nvram" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 04:24:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz1\x00', 0x0}) [ 325.951355][ T39] audit: type=1400 audit(1656735894.564:322): avc: denied { open } for pid=7582 comm="syz-executor.2" path="/dev/nvram" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 325.952421][ T7585] loop3: detected capacity change from 0 to 15 [ 325.973313][ T39] audit: type=1400 audit(1656735894.564:323): avc: denied { ioctl } for pid=7582 comm="syz-executor.2" path="/dev/nvram" dev="devtmpfs" ino=629 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 326.009262][ T7585] Dev loop3: unable to read RDB block 15 [ 326.016348][ T7585] loop3: unable to read partition table 04:24:54 executing program 0: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x1400) [ 326.024329][ T7585] loop3: partition table beyond EOD, truncated [ 326.030413][ T7585] UDF-fs: bad mount option "smackfstransmute=:&[#+%$&]-" or missing value 04:24:57 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:24:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz1\x00', 0x0}) 04:24:57 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r0, 0x0, 0x0, 0x3f) 04:24:57 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010d0000000000000000f0ff9d3b0200f0ffffff8520030003"], &(0x7f0000000480)='GPL\x00', 0x1, 0xa8, &(0x7f00000004c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:24:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz1\x00', 0x0}) [ 328.945898][ T7601] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:24:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2}, 0x2000004c, &(0x7f00000000c0)={0x0}}, 0x20044080) 04:24:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x4, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz1\x00', 0x0}) 04:25:00 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, 0x91ffffff}, 0x2000004c, &(0x7f00000000c0)={0x0}}, 0x20044080) 04:25:00 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a69c8b59dc21891cdaa201a08ab22ef74dc52d16fd68aaf1584e3b954da5cfe3581dbc89249dc49b1c45093498f4fef184fcdc6d3f648e8198ce402f323b87d4"}, 0x48, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r1) 04:25:00 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:00 executing program 3: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_gettime(0x0, &(0x7f0000000040)) [ 331.992999][ T7619] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 04:25:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{0x0, 0x0, 0x4e86}], 0x0, &(0x7f0000000440)={[], [{@obj_type={'obj_type', 0x3d, '/dev/vcsa#\x00'}}]}) 04:25:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)=""/238, 0x1a, 0xee, 0x1}, 0x20) 04:25:03 executing program 2: syz_io_uring_setup(0x224e, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 04:25:03 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:03 executing program 3: syz_clone3(&(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000840)}, 0x58) syz_io_uring_setup(0xba0, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, 0x0, 0x0) 04:25:03 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) [ 335.082207][ T7639] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:03 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='\b') r1 = getpgrp(0x0) syz_clone3(&(0x7f0000000380)={0x40000000, &(0x7f0000000000), 0x0, 0x0, {0x29}, &(0x7f0000000180)=""/228, 0xe4, &(0x7f0000000400)=""/209, &(0x7f00000000c0)=[r1, r0, 0x0], 0x3}, 0x58) 04:25:03 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[{0x0, 0x0, 0x4e86}], 0x0, 0x0) [ 335.145869][ T7649] loop3: detected capacity change from 0 to 78 04:25:03 executing program 3: syz_clone(0xa0004200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 335.223300][ T7484] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 04:25:03 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='\b') r1 = getpgrp(0x0) syz_clone3(&(0x7f0000000380)={0x40000000, &(0x7f0000000000), 0x0, 0x0, {0x29}, &(0x7f0000000180)=""/228, 0xe4, &(0x7f0000000400)=""/209, &(0x7f00000000c0)=[r1, r0, 0x0], 0x3}, 0x58) 04:25:06 executing program 3: syz_clone(0xa0004200, 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:06 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:06 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:06 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:25:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14}, 0x14}}, 0x44070) [ 338.084340][ T7667] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:06 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f0000000200)=""/238, 0x2a, 0xee, 0x1}, 0x20) 04:25:06 executing program 2: openat$null(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) 04:25:06 executing program 2: syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x20001) [ 338.169236][ T39] audit: type=1400 audit(1656735906.804:324): avc: denied { write } for pid=7676 comm="syz-executor.2" name="sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 04:25:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000200)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@loopback]}, 0x18) 04:25:07 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, 0x0) 04:25:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@loopback, @dev, @private0}) 04:25:07 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:07 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000040)) 04:25:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x1000, 0x2c, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0xfc8, 0x2, [@TCA_ROUTE4_POLICE={0xc3c, 0x5, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x380, 0x6, [@m_ife={0x11c, 0x0, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x8}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_DMAC={0xa, 0x3, @random="114a2cdc5ea7"}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c}]}, {0x31, 0x6, "5ef617b1f1c944ae7078ae633cfc0b56ffe1d82496b76025685148a8db01c632e1c1dab4f42330dfb2dd5bef4f"}, {0xc}, {0xc}}}, @m_ctinfo={0x168, 0x0, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0xe9, 0x6, "431c2b35d21bbef5144042b2471805e77768f83fd3b60a6a7f3ef776d861cb1f1b0e7cdc10298ad73bb94590bb8827f6b9e3eb0f43f4e898145381fefdb420e3fcc5ca509dae6c560a28c37aec4ef3da0a6d4f56013d45e7dcac3dff202de1b0d0840ea0aa5816947ff6afe621bfa417a3be7bcbf76c2a45f3b21cd1f72e81a8449a78e93954675acb8a47ba6b2f0e4fdaae54ff2b84c82ee350bdc741b0ee55f49a09e7a198812ea708c2b987753ea51870982e9ce7fbe582ab24a6e1e4da613055c9c868b21d8d733762f6f50d9b75937851ddf7e157866ac03623a2e1ae338dfb5941bf"}, {0xc}, {0xc}}}, @m_sample={0xf8, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0xa9, 0x6, "1a6eb382916193ff7ecc01af7df979564d6086a7e67e6a1d9e0d8de405d41b32c814eaa7dbe07bc70edf73728949e962e8b8a357d7e1479b4453a5073bd4bc50742ca42fa9829e881c65e3792479bbc5fc88d1207f22cd43cedd1e125d7890ee2aa88c14565fabfbff35fa5411a3c7710c9f8d9cd29ce9c76f3ebb7bae9dee280cf09a39336bc62020428bcd53c32b949b030123cdd693fbfc3b2d6985978a594ce2de7d86"}, {0xc}, {0xc}}}]}]}}]}, 0x1000}}, 0x0) [ 338.973506][ T7694] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:07 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r0) 04:25:07 executing program 2: syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x4001) 04:25:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) 04:25:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000080)) 04:25:08 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) mmap(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x0, 0x811, r0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 04:25:08 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000c40), 0x18) 04:25:08 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:08 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:25:08 executing program 3: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000340), 0x0, 0x0, 0x0, r0) [ 339.813203][ T39] audit: type=1400 audit(1656735908.444:325): avc: denied { map } for pid=7710 comm="syz-executor.3" path="socket:[48467]" dev="sockfs" ino=48467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 339.849262][ T7720] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:08 executing program 2: fsopen(&(0x7f0000000000)='ubifs\x00', 0x0) 04:25:08 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r0) 04:25:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 04:25:08 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_clone3(&(0x7f0000000380)={0x8080000, 0x0, 0x0, &(0x7f00000001c0), {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x300, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x1, 0xd}, @val={0x8}, @void}}}, 0x24}}, 0x0) semctl$SETVAL(0xffffffffffffffff, 0x343ef02092b3fba9, 0x10, &(0x7f00000004c0)=0x7fff) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000500), 0x4) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) dup2(r2, 0xffffffffffffffff) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000580)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) sendmsg$nl_route_sched(r0, 0x0, 0x4) openat$incfs(r2, &(0x7f00000006c0)='.pending_reads\x00', 0x0, 0x140) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) userfaultfd(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000880), 0xffffffffffffffff) [ 339.939216][ T7731] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability 04:25:09 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 04:25:09 executing program 3: socketpair(0x9, 0x0, 0x0, &(0x7f00000007c0)) 04:25:09 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:09 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) [ 340.704842][ T39] audit: type=1400 audit(1656735909.344:326): avc: denied { create } for pid=7735 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 04:25:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0xec4, 0x2c, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}, @filter_kind_options=@f_route={{0xa}, {0xe8c, 0x2, [@TCA_ROUTE4_POLICE={0xc3c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x49, 0x8, 0x7f, 0x9, 0x2, 0x3ff, 0x1, 0x3, 0x1, 0x80000001, 0x0, 0x401, 0xffffffff, 0x1ff, 0x1, 0x3d3e, 0x215, 0x8, 0x4, 0x6, 0x0, 0xcc6, 0x7, 0x7, 0x0, 0x3, 0x6, 0x5, 0x2, 0x81, 0x10000, 0x7, 0x6, 0xa0, 0x7, 0x80, 0x769d, 0x400, 0xc, 0x3, 0x0, 0x1, 0x0, 0x8, 0xde2, 0x9, 0x2, 0x9, 0x9, 0x7, 0x80, 0x80000000, 0x9, 0x0, 0x6, 0x5, 0x40000, 0x9, 0x571, 0xfffffff7, 0x1f, 0x80000000, 0x401, 0xffff, 0x2, 0x8001, 0x61, 0x5, 0x7d8, 0x1, 0x3, 0x80000001, 0x5, 0x100, 0x6, 0x3, 0x0, 0x14a7, 0x4, 0xffffffff, 0x3, 0x1, 0x1, 0xb6, 0x2, 0xa5, 0x2, 0x5, 0x3, 0x1000, 0x10000, 0x80000001, 0x101, 0x0, 0x9, 0x8, 0x42d7, 0x2, 0xec1, 0xfffffffa, 0x0, 0xfffffff8, 0x10000, 0x1, 0x20, 0x1ff, 0x2, 0xa09, 0x4, 0x0, 0x10001, 0x3, 0x8000, 0x3, 0x30, 0x9, 0xffff0001, 0x4, 0xffffffff, 0x7ff, 0x3e5, 0x2, 0x2128, 0x100, 0x2, 0x6, 0x2, 0x5, 0x7a800000, 0x6, 0x8, 0xfffffffc, 0x3f, 0x1, 0x87f, 0x2, 0x400, 0x8f, 0x7, 0xe98e, 0x1000, 0x4, 0x6, 0x8, 0x9, 0x7ff, 0x3, 0xc67, 0x0, 0xffffffc9, 0x1, 0xb7, 0x9, 0x101, 0x3, 0x4, 0x9, 0x9, 0x6, 0x1, 0x200, 0x80000001, 0x0, 0x7, 0x10001, 0x1, 0x10000, 0x5, 0x2, 0xcf4c, 0x401, 0x6, 0x2, 0x400, 0x5, 0x3ff, 0x5, 0x5, 0x80, 0x60, 0x2, 0x401, 0x37, 0x1, 0xedf3, 0x3, 0x1, 0x4bfa, 0x4, 0x20, 0x2, 0xd7b9, 0x7, 0x6, 0x1, 0x1f, 0xffffff4f, 0x7, 0xffffffff, 0x60, 0x6, 0x4, 0x10001, 0x3, 0x3, 0x0, 0x0, 0x200, 0x7, 0x800, 0x3, 0x0, 0x1f, 0x9, 0x1, 0xbd, 0xcec, 0x1000, 0x60000000, 0x8, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x26040000, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2e20adaf, 0x80000001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000, 0x0, 0x400, 0x5, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x373, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xdf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x7, 0x9, 0x0, 0x81, 0x401, 0x5, 0xfe, 0x3, 0x7, 0x4, 0x5, 0x7, 0xdf, 0x4, 0x80, 0x0, 0x0, 0x5, 0x7, 0x9, 0x7fff, 0x6e, 0x3, 0x100, 0x7ff, 0x6, 0x1000, 0x5, 0x5, 0x280000, 0x80000001, 0x5, 0x45, 0x869b, 0x4, 0x0, 0x4, 0x1, 0x80000001, 0x9, 0x25, 0x0, 0x6, 0x0, 0x9, 0xff, 0x0, 0x0, 0x2, 0x8, 0x5, 0x1, 0x1, 0x2, 0x8, 0x80000000, 0x0, 0x14, 0x1, 0xf4, 0x24, 0x6, 0x3e, 0x5, 0x14a798d3, 0x9, 0x6, 0x3, 0xfa33, 0x6, 0x3, 0x671, 0x2, 0x800, 0x9, 0x3ff, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3ed, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5c, 0xff, 0x6, 0x7, 0x8, 0x81, 0x9, 0xfd3, 0x8000, 0x0, 0x1ff, 0x5, 0x401, 0x5, 0x1, 0x80000001, 0x41c, 0x9, 0x8, 0x8d1c, 0x2, 0x0, 0xfd5, 0x6, 0x74, 0x341, 0x9, 0x9d, 0x1, 0x3, 0x4, 0x5, 0x800, 0x401, 0x7, 0x8, 0x8001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff20bd, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8ac5, 0x80000001, 0x8, 0x1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x9, 0xf7, 0x7, 0x31, 0x0, 0xfff, 0x3, 0x5, 0x1, 0x5, 0x6, 0xe87, 0x800, 0x10001, 0x20, 0xfd, 0x101, 0x1, 0x4, 0x483, 0x4, 0x2, 0x63, 0x5, 0x6, 0x0, 0x6, 0x7ff, 0x6, 0x9, 0x3ff, 0x1, 0x2, 0x1, 0x3, 0x10000, 0x7fff, 0xe84d, 0x1000, 0x56cf, 0xfffffffc, 0x100, 0xfffffffb, 0x26b, 0x1, 0x0, 0x5, 0x1, 0x60347f9, 0x6, 0x4, 0x0, 0x9, 0x81, 0x0, 0x0, 0x8001, 0xfff, 0x9, 0x200, 0x9, 0x0, 0xf7, 0x3, 0x101, 0x4, 0x2e8b, 0x1f, 0x558edeaa, 0x0, 0x2, 0x1ff, 0x1, 0x58, 0x3, 0x6, 0x8, 0x7, 0x3, 0x9, 0xfff, 0x5, 0x0, 0xfffffffc, 0x200, 0x1, 0x10000, 0x3f2df3a5, 0x100, 0x578, 0x258c, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x244, 0x6, [@m_ife={0x11c, 0x0, 0x0, 0x0, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x8}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_DMAC={0xa, 0x3, @random="114a2cdc5ea7"}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c}]}, {0x31, 0x6, "5ef617b1f1c944ae7078ae633cfc0b56ffe1d82496b76025685148a8db01c632e1c1dab4f42330dfb2dd5bef4f"}, {0xc}, {0xc}}}, @m_ctinfo={0xf8, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0xc9, 0x6, "431c2b35d21bbef5144042b2471805e77768f83fd3b60a6a7f3ef776d861cb1f1b0e7cdc10298ad73bb94590bb8827f6b9e3eb0f43f4e898145381fefdb420e3fcc5ca509dae6c560a28c37aec4ef3da0a6d4f56013d45e7dcac3dff202de1b0d0840ea0aa5816947ff6afe621bfa417a3be7bcbf76c2a45f3b21cd1f72e81a8449a78e93954675acb8a47ba6b2f0e4fdaae54ff2b84c82ee350bdc741b0ee55f49a09e7a198812ea708c2b987753ea51870982e9ce7fbe582ab24a6e1e4da613055c9c868"}, {0xc}, {0xc}}}, @m_xt={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4004014}, 0x80) [ 340.718461][ T39] audit: type=1400 audit(1656735909.354:327): avc: denied { read } for pid=7741 comm="syz-executor.1" dev="nsfs" ino=4026533044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 04:25:09 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) 04:25:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000180)) [ 340.732664][ T39] audit: type=1400 audit(1656735909.354:328): avc: denied { open } for pid=7741 comm="syz-executor.1" path="net:[4026533044]" dev="nsfs" ino=4026533044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 04:25:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, &(0x7f0000000040)) 04:25:10 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:10 executing program 2: creat(&(0x7f0000000100)='./file0\x00', 0x0) getxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000200)=""/254, 0xfe) 04:25:10 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:10 executing program 2: socketpair(0x26, 0x5, 0x0, &(0x7f0000000900)) 04:25:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x2}, 0x20) 04:25:10 executing program 2: add_key(&(0x7f0000001680)='user\x00', &(0x7f00000016c0)={'syz', 0x2}, &(0x7f0000001700)='e', 0x1, 0xffffffffffffffff) 04:25:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x13, r0, 0x8000000) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000e86000)='\x00', 0x1) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 341.663229][ T39] audit: type=1400 audit(1656735910.284:329): avc: denied { map } for pid=7768 comm="syz-executor.3" path="socket:[48649]" dev="sockfs" ino=48649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 04:25:10 executing program 2: r0 = socket(0x11, 0x3, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x8}, {0x8}}]}, 0x40}}, 0x0) 04:25:10 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002dc0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 04:25:10 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:11 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:11 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0xf, &(0x7f0000000640)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7}, @generic={0x3}]}}) 04:25:11 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0xb41e, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 04:25:11 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 342.514779][ T7790] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 04:25:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 04:25:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x3}, {}]}, @union]}}, &(0x7f0000000040)=""/185, 0x42, 0xb9, 0x1}, 0x20) 04:25:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x8400, &(0x7f0000000600)={[], [{@context={'context', 0x3d, 'user_u'}}]}) [ 342.630819][ T7799] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 04:25:11 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0xa, &(0x7f0000000000)=@framed={{}, [@call, @cb_func, @initr0, @map_idx_val]}, &(0x7f0000000080)='GPL\x00', 0x800, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 342.733280][ T5499] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 343.173402][ T5499] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 343.180288][ T5499] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 343.187875][ T5499] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 04:25:11 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) [ 343.353364][ T5499] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.360373][ T5499] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.366919][ T5499] usb 7-1: Product: syz [ 343.370396][ T5499] usb 7-1: Manufacturer: syz [ 343.374146][ T5499] usb 7-1: SerialNumber: syz [ 343.683491][ T5499] usb 7-1: 0:2 : does not exist [ 343.696877][ T5499] usb 7-1: USB disconnect, device number 13 [ 343.724085][ T7484] udevd[7484]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 04:25:12 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0xc) 04:25:12 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:12 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0xf, &(0x7f0000000640)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7}, @generic={0x3}]}}) 04:25:12 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x1000) 04:25:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, 0x0, 0x0) 04:25:12 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:12 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 344.443198][ T5499] usb 7-1: new high-speed USB device number 14 using dummy_hcd 04:25:13 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 344.533363][ T172] usb 8-1: new high-speed USB device number 3 using dummy_hcd 04:25:13 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 344.943748][ T5499] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 344.949429][ T5499] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 344.956057][ T5499] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.963446][ T172] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 04:25:13 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) [ 345.133472][ T5499] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.139798][ T5499] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.143495][ T172] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 345.145739][ T5499] usb 7-1: Product: syz [ 345.155741][ T172] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.157213][ T5499] usb 7-1: Manufacturer: syz [ 345.157227][ T5499] usb 7-1: SerialNumber: syz [ 345.172030][ T172] usb 8-1: Product: syz [ 345.176789][ T172] usb 8-1: Manufacturer: syz [ 345.180644][ T172] usb 8-1: SerialNumber: syz [ 345.225682][ T172] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 345.428191][ T5495] usb 8-1: USB disconnect, device number 3 [ 345.503572][ T5499] usb 7-1: 0:2 : does not exist [ 345.515322][ T5499] usb 7-1: USB disconnect, device number 14 04:25:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000380)) 04:25:14 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:14 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:14 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 04:25:14 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f00000001c0)) 04:25:14 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) 04:25:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc) [ 346.092536][ T39] audit: type=1400 audit(1656735914.724:330): avc: denied { unmount } for pid=3711 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 04:25:14 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 04:25:14 executing program 2: execveat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x1100) [ 346.273199][ T29] usb 8-1: new high-speed USB device number 4 using dummy_hcd 04:25:14 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1b34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x0, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 346.593267][ T3749] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 346.663302][ T29] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 04:25:15 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) [ 346.823395][ T29] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 346.830063][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.836188][ T29] usb 8-1: Product: syz [ 346.839118][ T29] usb 8-1: Manufacturer: syz [ 346.842229][ T29] usb 8-1: SerialNumber: syz [ 346.884921][ T29] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 347.003337][ T3749] usb 7-1: config 1 has an invalid interface number: 0 but max is -1 [ 347.012294][ T3749] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 347.020123][ T3749] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 347.089897][ T29] usb 8-1: USB disconnect, device number 4 [ 347.193355][ T3749] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 347.200184][ T3749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.205803][ T3749] usb 7-1: Product: syz [ 347.211637][ T3749] usb 7-1: Manufacturer: syz [ 347.215551][ T3749] usb 7-1: SerialNumber: syz [ 347.266556][ T3749] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 347.465526][ T5496] usb 7-1: USB disconnect, device number 15 04:25:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}}, &(0x7f0000000040)=""/185, 0x46, 0xb9, 0x1}, 0x20) 04:25:16 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:16 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)) [ 347.655972][ T39] audit: type=1400 audit(1656735916.294:331): avc: denied { ioctl } for pid=7866 comm="syz-executor.3" path="/dev/fuse" dev="devtmpfs" ino=104 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 04:25:16 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040), 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:16 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}}]}}, 0x0) 04:25:16 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 347.974299][ T5496] usb 8-1: new high-speed USB device number 5 using dummy_hcd 04:25:16 executing program 2: bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 04:25:16 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 348.233200][ T5496] usb 8-1: Using ep0 maxpacket: 8 [ 348.294763][ T29] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 348.353403][ T5496] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.370702][ T5496] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 348.376994][ T5496] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 348.383244][ T5496] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 348.389416][ T5496] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 04:25:17 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000", 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) [ 348.554598][ T5496] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.561607][ T5496] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.568116][ T5496] usb 8-1: Product: syz [ 348.571641][ T5496] usb 8-1: Manufacturer: syz [ 348.575519][ T5496] usb 8-1: SerialNumber: syz 04:25:17 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 348.783330][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 348.823489][ T29] usb 7-1: not running at top speed; connect to a high speed hub [ 348.864374][ T5496] cdc_ncm 8-1:1.0: bind() failure [ 348.870974][ T5496] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 348.876830][ T5496] cdc_ncm 8-1:1.1: bind() failure [ 348.886383][ T5496] usb 8-1: USB disconnect, device number 5 [ 348.903395][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 04:25:17 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 349.073418][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.080000][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.086753][ T29] usb 7-1: Product: syz [ 349.090987][ T29] usb 7-1: Manufacturer: syz [ 349.094964][ T29] usb 7-1: SerialNumber: syz 04:25:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) 04:25:17 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 349.376730][ T29] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 349.384282][ T29] usb 7-1: USB disconnect, device number 16 04:25:18 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfa}}]}}]}}, 0x0) [ 349.683310][ T5499] usb 8-1: new high-speed USB device number 6 using dummy_hcd 04:25:18 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000", 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:18 executing program 2: open$dir(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) unlink(0x0) 04:25:18 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:18 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) tee(r0, 0xffffffffffffffff, 0x6, 0x0) [ 349.883871][ T5499] usb 8-1: device descriptor read/64, error 18 04:25:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000004a80)=0x9, 0x4) [ 349.929717][ T39] audit: type=1400 audit(1656735918.564:332): avc: denied { setopt } for pid=7914 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 04:25:18 executing program 2: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) 04:25:18 executing program 2: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 350.163207][ T5499] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 350.363352][ T5499] usb 8-1: device descriptor read/64, error 18 [ 350.483425][ T5499] usb usb8-port1: attempt power cycle [ 350.893205][ T5499] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 350.983370][ T5499] usb 8-1: Invalid ep0 maxpacket: 0 [ 351.133548][ T5499] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 351.223435][ T5499] usb 8-1: Invalid ep0 maxpacket: 0 [ 351.227307][ T5499] usb usb8-port1: unable to enumerate USB device 04:25:21 executing program 3: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 04:25:21 executing program 2: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 04:25:21 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:21 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000", 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}, {r1}], 0x2, 0x0) dup2(r1, r0) 04:25:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000080), 0x8) 04:25:21 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x2}, 0x1c) 04:25:21 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="b2", 0xffffff96, 0x80, &(0x7f0000000100)={0x1c, 0x1c, 0x3}, 0x1c) 04:25:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, &(0x7f0000000380)=[@sndinfo={0x1c}, @sndrcv={0x2c}], 0x48}, 0x0) 04:25:21 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000000c0), &(0x7f0000000000)=0x90) 04:25:21 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:21 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100", 0x18) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:21 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6d9284c700188800fe8000000000000000000000000000aaff0200000000000000000049fe"], 0x0) 04:25:21 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 04:25:21 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:21 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20104, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="a1", 0x1, 0x2008d, 0x0, 0x0) 04:25:21 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x27, &(0x7f0000000000), &(0x7f00000000c0)=0x8) 04:25:21 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv6}}, 0x0) 04:25:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 04:25:22 executing program 3: open$dir(&(0x7f0000001280)='./file0\x00', 0x200, 0x7) open(&(0x7f00000019c0)='./file0\x00', 0x0, 0x0) 04:25:22 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100", 0x18) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:22 executing program 2: syz_io_uring_setup(0x350e, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) 04:25:22 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:22 executing program 3: syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001100)=ANY=[@ANYBLOB="12010003000000101e0401284000010203010902"], &(0x7f0000001880)={0x0, 0x0, 0x12, &(0x7f0000001540)={0x5, 0xf, 0x12, 0x2, [@generic={0x3}, @ss_cap={0xa}]}}) 04:25:22 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1d, 0x0, &(0x7f0000000c40)) 04:25:22 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x6}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 04:25:22 executing program 2: futex(0x0, 0xa, 0x0, &(0x7f0000000080), 0x0, 0x0) 04:25:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000000)=0x88) [ 354.523841][ T6113] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 354.763183][ T6113] usb 8-1: Using ep0 maxpacket: 16 [ 355.023605][ T6113] usb 8-1: config 0 has no interfaces? 04:25:23 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100", 0x18) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 04:25:23 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 355.213400][ T6113] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 355.221802][ T6113] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.229377][ T6113] usb 8-1: Product: syz [ 355.232922][ T6113] usb 8-1: Manufacturer: syz [ 355.237436][ T6113] usb 8-1: SerialNumber: syz [ 355.245560][ T6113] usb 8-1: config 0 descriptor?? [ 355.506775][ T4613] usb 8-1: USB disconnect, device number 10 04:25:24 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 04:25:24 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2f, 0x0, &(0x7f0000000c40)) 04:25:24 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:24 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dc", 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:24 executing program 2: r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc0506107, 0x0) 04:25:24 executing program 3: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) 04:25:24 executing program 2: r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc0506107, 0x0) 04:25:24 executing program 3: r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0x541b, 0x0) 04:25:24 executing program 2: r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc0506107, 0x0) 04:25:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) [ 356.192527][ T39] audit: type=1400 audit(1656735924.824:333): avc: denied { ioctl } for pid=8029 comm="syz-executor.3" path="socket:[52256]" dev="sockfs" ino=52256 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 04:25:25 executing program 2: r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc0506107, 0x0) 04:25:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) 04:25:25 executing program 2: ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc0506107, 0x0) 04:25:25 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:25 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dc", 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:25 executing program 2: ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc0506107, 0x0) 04:25:25 executing program 2: ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc0506107, 0x0) 04:25:25 executing program 2: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc0506107, 0x0) 04:25:25 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x2, &(0x7f0000000240)=@raw=[@map_val], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) pipe(&(0x7f0000000a00)) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x3, &(0x7f0000000b00)=@framed, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:25:25 executing program 2: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc0506107, 0x0) 04:25:25 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:25 executing program 2: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc0506107, 0x0) 04:25:26 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dc", 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000280), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000740)) 04:25:26 executing program 2: syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc0506107, 0x0) 04:25:26 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:26 executing program 2: syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc0506107, 0x0) 04:25:26 executing program 3: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/28) 04:25:26 executing program 2: syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc0506107, 0x0) 04:25:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 04:25:27 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf", 0x1e) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:27 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 04:25:27 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}}, 0xe8) 04:25:27 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:25:27 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) [ 358.650341][ T39] audit: type=1400 audit(1656735927.284:334): avc: denied { read } for pid=8083 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 04:25:27 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8912, &(0x7f0000000180)={'tunl0\x00', 0x0}) 04:25:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000100)) 04:25:27 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x5, 0x0, &(0x7f0000000c40)) 04:25:28 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf", 0x1e) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:28 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3}) 04:25:28 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:25:28 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x6) 04:25:28 executing program 3: r0 = memfd_secret(0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 04:25:28 executing program 2: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 04:25:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) [ 359.568014][ T8117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8117 comm=syz-executor.3 04:25:28 executing program 2: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/187) [ 359.578173][ T39] audit: type=1400 audit(1656735928.204:335): avc: denied { append } for pid=8115 comm="syz-executor.2" name="ocfs2_control" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 04:25:28 executing program 2: pipe2$watch_queue(&(0x7f0000000100), 0x80) 04:25:28 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf", 0x1e) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:28 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 04:25:28 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:25:29 executing program 2: io_uring_setup(0x3432, &(0x7f0000000140)={0x0, 0x0, 0x2}) 04:25:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 04:25:29 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) 04:25:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) [ 360.410590][ T39] audit: type=1400 audit(1656735929.044:336): avc: denied { setopt } for pid=8137 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 04:25:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) [ 360.445470][ T39] audit: type=1400 audit(1656735929.074:337): avc: denied { read } for pid=3354 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 04:25:29 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0x2020) 04:25:29 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:29 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0x2020) 04:25:29 executing program 2: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 04:25:29 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 361.242688][ T8152] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:29 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0x2020) 04:25:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 04:25:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 04:25:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) [ 361.533496][ T174] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 361.793171][ T174] usb 7-1: Using ep0 maxpacket: 32 [ 361.934214][ T174] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 04:25:30 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0x2020) 04:25:30 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 362.123418][ T174] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 362.129345][ T174] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 362.137222][ T174] usb 7-1: Product: syz [ 362.140955][ T174] usb 7-1: Manufacturer: syz [ 362.146958][ T174] usb 7-1: SerialNumber: syz [ 362.155459][ T174] usb 7-1: config 0 descriptor?? [ 362.205475][ T174] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 362.221203][ T174] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 364.236844][ T3753] usb 7-1: USB disconnect, device number 17 04:25:32 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:32 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000280), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_fd={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7feb5d1f"}, 0x0, 0x4, {0x0}}) 04:25:32 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0x2020) 04:25:32 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 364.246460][ T3753] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 364.259600][ T8176] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:32 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0x2020) 04:25:32 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x3, &(0x7f0000000b00)=@framed, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0xd3, &(0x7f0000000bc0)=""/211, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:25:32 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') read$FUSE(r0, 0x0, 0x0) 04:25:32 executing program 2: msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000004c0)=""/4096) 04:25:33 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') read$FUSE(r0, 0x0, 0x0) 04:25:33 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:33 executing program 2: socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 04:25:33 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:33 executing program 2: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1) [ 365.117753][ T8200] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:33 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') read$FUSE(r0, 0x0, 0x0) 04:25:33 executing program 2: r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0x8044610a, 0x0) 04:25:33 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xdb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x49, &(0x7f0000000200)={0x5, 0xf, 0x49, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2}, @wireless={0xb}, @ss_cap={0xa}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d072cb448e12c8ead5b2a15eda80ee77"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "61e12837f4a89da957d49c8b83e03b7a"}]}}) 04:25:33 executing program 2: r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0x8044610a, 0x0) [ 365.433326][ T174] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 365.683240][ T174] usb 8-1: Using ep0 maxpacket: 8 [ 365.893515][ T174] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 04:25:34 executing program 2: r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0x8044610a, 0x0) 04:25:34 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:34 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:34 executing program 2: r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0x8044610a, 0x0) [ 365.973784][ T8219] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:34 executing program 2: ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0x8044610a, 0x0) 04:25:34 executing program 2: ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0x8044610a, 0x0) [ 366.063496][ T174] usb 8-1: New USB device found, idVendor=056a, idProduct=00db, bcdDevice= 0.40 [ 366.071612][ T174] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.079010][ T174] usb 8-1: Product: syz [ 366.082269][ T174] usb 8-1: Manufacturer: syz [ 366.085874][ T174] usb 8-1: SerialNumber: syz [ 366.135910][ T174] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 366.342216][ T38] usb 8-1: USB disconnect, device number 11 04:25:35 executing program 2: ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0x8044610a, 0x0) 04:25:35 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:35 executing program 3: r0 = syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0x8044610a, 0x0) 04:25:35 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:35 executing program 2: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0x8044610a, 0x0) [ 366.872798][ T8233] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:35 executing program 3: syz_emit_ethernet(0x11, &(0x7f00000000c0)={@remote, @random="8d0da703aa2f", @void, {@x25}}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000001240)={@random="164d6e8bd0a3", @multicast, @void}, 0x0) 04:25:35 executing program 2: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0x8044610a, 0x0) 04:25:35 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x2, &(0x7f0000000240)=@raw=[@map_val], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x17, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:25:35 executing program 2: r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0x8044610a, 0x0) 04:25:35 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:35 executing program 2: syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0x8044610a, 0x0) 04:25:36 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:36 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x14bb02, 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)="fcf8", 0x2}, {&(0x7f0000000200)="b7", 0x1}], 0x2, 0x3, 0x0, 0x0) 04:25:36 executing program 2: syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0x8044610a, 0x0) 04:25:36 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:36 executing program 2: syz_open_dev$cec(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0x8044610a, 0x0) 04:25:36 executing program 3: r0 = socket(0xa, 0x3, 0x3a) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)) [ 367.741152][ T8265] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:36 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}}}}]}}, 0x0) syz_usb_disconnect(r0) 04:25:36 executing program 2: r0 = socket(0xa, 0x2, 0x3a) recvfrom$phonet(r0, 0x0, 0x0, 0x40006003, 0x0, 0x0) [ 367.787285][ T39] audit: type=1400 audit(1656735936.424:338): avc: denied { read } for pid=8271 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 368.053680][ T174] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 368.424553][ T174] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.433915][ T174] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 368.442302][ T174] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 368.450014][ T174] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 368.457104][ T174] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 04:25:37 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0xaf01, 0x0) 04:25:37 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:37 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 368.593319][ T39] audit: type=1400 audit(1656735937.224:339): avc: denied { ioctl } for pid=8276 comm="syz-executor.2" path="/dev/vhost-net" dev="devtmpfs" ino=1112 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 04:25:37 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0205647, &(0x7f0000000040)={0x1000000, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e42b1781"}}) [ 368.638587][ T8284] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 368.645480][ T174] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.652664][ T174] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.660846][ T174] usb 8-1: Product: syz [ 368.667010][ T174] usb 8-1: Manufacturer: syz 04:25:37 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {0x20, 0x0, 0x0, 0x5}, {0x6}]}) [ 368.670741][ T174] usb 8-1: SerialNumber: syz 04:25:37 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x163, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) [ 368.963370][ T174] cdc_ncm 8-1:1.0: bind() failure [ 368.975785][ T174] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 368.981368][ T174] cdc_ncm 8-1:1.1: bind() failure [ 369.005413][ T174] usb 8-1: USB disconnect, device number 12 [ 369.043288][ T38] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 369.293647][ T38] usb 7-1: Using ep0 maxpacket: 8 [ 369.423467][ T38] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.432338][ T38] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 369.438663][ T38] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 04:25:38 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x5421, &(0x7f0000001140)) 04:25:38 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 04:25:38 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) [ 369.649578][ T8296] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 369.653479][ T38] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 04:25:38 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 369.663549][ T38] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.669432][ T38] usb 7-1: Product: syz [ 369.672162][ T38] usb 7-1: Manufacturer: syz [ 369.675963][ T38] usb 7-1: SerialNumber: syz 04:25:38 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e42b1781"}}) 04:25:38 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 04:25:38 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001380)={0x4, 0x0, [{0x1000, 0xec, &(0x7f0000000040)=""/236}, {0x10000, 0xb6, &(0x7f0000000140)=""/182}, {0xf000, 0xc1, &(0x7f0000000200)=""/193}, {0x0, 0x0, 0x0}]}) [ 369.954499][ T38] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 369.959567][ T38] cdc_ncm 7-1:1.0: bind() failure [ 369.965703][ T38] usb 7-1: USB disconnect, device number 18 04:25:39 executing program 2: clock_gettime(0xa207489176d4a012, 0x0) 04:25:39 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:25:39 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x10, 0x0) 04:25:39 executing program 3: r0 = socket(0x2, 0x3, 0x3) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000400)) 04:25:39 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000040)={0x0, 0x8, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e42b1781"}}) 04:25:39 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:39 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:25:39 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 370.510275][ T8320] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:39 executing program 3: syz_usb_connect$uac1(0x0, 0x97, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902850003010140030904000000010100000a24010300040201020a240701050008995fdd0904010000010000000904010101010200000a24020101020680425d5024012101000009050109ff0301067f0725010105ff0f0904020000010200000904020101010200000724010540030009058209080081038107250101810500f56652a668bd2d5e47c3866e7340fcf42f49f84cd76539a234ab3225fa6bd1f9d2cb8fed026afe15b93265b296c470d04658b79066aa1af61c9dfead6bd6ebdde4d9738b8133f9db006fadd8843ad82091ef5b695fc57621e90defc78bad105039c1f9288b763f3509db347b01515ca91bb43b434125d7297937f31df5c90a9bacc26ca9190efa739661188266502611b9cabde81e49603ebdac4fd583d4e20f48777d716e76fd398214a222a32d2fc280977ac366d48eb9572f4f"], &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x4d, 0x6, 0x7f, 0x10, 0x3}, 0x26, &(0x7f0000000100)={0x5, 0xf, 0x26, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0xeb, 0x6, 0x40}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb0, 0xb9, 0x7, 0x2, 0xa}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3, 0x0, 0x8000, 0xe0}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x410}}, {0x5e, &(0x7f0000000200)=@string={0x5e, 0x3, "f25dace9788253a08c777d757488e8f35e8ae3a7afa6a2bbae51155c05c6d5d2aaa233972403f31f75e8bad6460f11ef010e2af36cbd15cbef5480564bc272dcb0a1875b4eb59dee2e367765e7a3b0ff17e57d63bba270e1d4c4d14c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x1e, 0x3, 0x280a}}]}) 04:25:39 executing program 2: r0 = socket(0xa, 0x3, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 04:25:39 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) 04:25:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) [ 370.823355][ T174] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 371.184191][ T174] usb 8-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 371.191798][ T174] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 371.353494][ T174] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 04:25:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) 04:25:39 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:39 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) [ 371.362077][ T174] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.375168][ T174] usb 8-1: Product: А [ 371.382245][ T174] usb 8-1: Manufacturer:  [ 371.387564][ T174] usb 8-1: SerialNumber: 已艸ꁓ瞌畽衴詞꟣ꚯ뮢冮尕옅틕ꊪ霳̤ῳ횺ཆก뵬쬕哯嚀쉋ꆰ宇땎㘮敷ꏧﾰ捽ꊻ쓔䳑 [ 371.401991][ T8345] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 371.814059][ T174] usb 8-1: 0:2 : does not exist [ 371.836041][ T174] usb 8-1: USB disconnect, device number 13 04:25:40 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) 04:25:40 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:40 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:40 executing program 3: syz_usb_connect$uac1(0x0, 0x97, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x4d, 0x6, 0x7f, 0x10, 0x3}, 0x26, &(0x7f0000000100)={0x5, 0xf, 0x26, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0xeb, 0x6, 0x40}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb0, 0xb9, 0x7, 0x2, 0xa}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3, 0x0, 0x8000, 0xe0}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x410}}, {0x5e, &(0x7f0000000200)=@string={0x5e, 0x3, "f25dace9788253a08c777d757488e8f35e8ae3a7afa6a2bbae51155c05c6d5d2aaa233972403f31f75e8bad6460f11ef010e2af36cbd15cbef5480564bc272dcb0a1875b4eb59dee2e367765e7a3b0ff17e57d63bba270e1d4c4d14c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x1e, 0x3, 0x280a}}]}) 04:25:40 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) [ 372.260362][ T8363] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:40 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) 04:25:40 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) 04:25:40 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000067580)) 04:25:41 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000067580)) 04:25:41 executing program 2: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000067580)) [ 372.535997][ T174] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 372.913471][ T174] usb 8-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 372.920364][ T174] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.093666][ T174] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 04:25:41 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 373.107882][ T174] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.112890][ T174] usb 8-1: Product: А [ 373.116386][ T174] usb 8-1: Manufacturer:  [ 373.119673][ T174] usb 8-1: SerialNumber: 已艸ꁓ瞌畽衴詞꟣ꚯ뮢冮尕옅틕ꊪ霳̤ῳ횺ཆก뵬쬕哯嚀쉋ꆰ宇땎㘮敷ꏧﾰ捽ꊻ쓔䳑 [ 373.513466][ T174] usb 8-1: 0:2 : does not exist [ 373.525452][ T174] usb 8-1: USB disconnect, device number 14 [ 373.547513][ T7833] udevd[7833]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 04:25:42 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)={0x4, 0x0, [{0x6000, 0xce, &(0x7f0000000040)=""/206}, {0xf000, 0x1000, &(0x7f0000003180)=""/4096}, {0x2000, 0x1000, &(0x7f0000002180)=""/4096}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_FEATURES(r0, 0xaf02, 0x0) 04:25:42 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:42 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) 04:25:42 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 373.895102][ T8385] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:42 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) 04:25:42 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0205647, &(0x7f0000000040)={0x0, 0x500, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e42b1781"}}) 04:25:42 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) 04:25:42 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) 04:25:42 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000140)='3\x00', 0x2) [ 374.244607][ T8406] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 04:25:43 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:43 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000140)='3\x00', 0x2) 04:25:43 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) 04:25:43 executing program 0: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000000)={0x1000, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 04:25:43 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000067580)) [ 374.805775][ T8416] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @private2}}) 04:25:43 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000067580)) 04:25:43 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:43 executing program 3: setresuid(0xee00, 0xee01, 0x0) setresuid(0xee00, 0x0, 0xffffffffffffffff) 04:25:43 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000067580)) [ 374.960167][ T8431] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 375.127766][ T8437] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 04:25:43 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:43 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x7, 0x12, r0, 0x82000000) 04:25:43 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000067580)) 04:25:43 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) [ 375.304008][ T39] audit: type=1400 audit(1656735943.944:340): avc: denied { execute } for pid=8439 comm="syz-executor.3" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 04:25:43 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x7, 0x12, r0, 0x82000000) [ 375.308047][ T8444] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:43 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x7, 0x12, r0, 0x82000000) 04:25:44 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 04:25:44 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x7, 0x12, r0, 0x82000000) 04:25:44 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:44 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 04:25:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000080), 0x4) 04:25:44 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0), 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) [ 375.502329][ T8465] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:44 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000a00)={0xaa, 0x2}) 04:25:44 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 04:25:44 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000a00)={0xaa, 0x2}) 04:25:44 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/72) 04:25:44 executing program 0: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:44 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000a00)={0xaa, 0x2}) 04:25:44 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0), 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=[@hopopts={{0x18}}], 0x18}}], 0x1, 0x0) [ 376.040699][ T8488] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:44 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000a00)={0xaa, 0x2}) 04:25:44 executing program 2: setreuid(0xffffffffffffffff, 0xee00) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) 04:25:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001500)=@filter={'filter\x00', 0xe, 0x5, 0x12e, [], 0x0, 0x0, &(0x7f0000000d40)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'bridge_slave_0\x00', 'team_slave_1\x00', 'pim6reg0\x00', 'veth1\x00', @broadcast, [], @broadcast, [], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x1a6) 04:25:44 executing program 3: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, 0x0) 04:25:45 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0), 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'geneve1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "b54ba696ae3f70ae12132c28ee7c4d26ad30c7917f5f398ce4f15fafda84e790", "d87c70ef135f41194def7b09c906636bfed18abe6036ef13ffd24b4768abd80e", "b1a9f929a23db9fffefdd895c93d18ce9049b82ebb24757fdbd029a6f1ac6e90", "802739e587133484e000c7d2e63513a2103da67fe155888d67ea21988877e420", "1670d064e551c6bfc89151903945b75aff1f6e257ef1cbac9d82941e65676f75", "4d1c1222d699bd8de83173b8"}}) 04:25:45 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000680)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x2, 0x0) 04:25:45 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) [ 376.547632][ T8511] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) 04:25:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) 04:25:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x14, 0x0, &(0x7f0000000100)) 04:25:45 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(0xffffffffffffffff, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0xffffffb3, 0x80000000}, 0x1c) [ 376.646814][ T8528] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:45 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:45 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000080)=0xffffffffffffff25) 04:25:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:25:45 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@s={0x5, @generic}) [ 376.811180][ T39] audit: type=1400 audit(1656735945.444:341): avc: denied { getopt } for pid=8530 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 04:25:45 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$dsp(r0, &(0x7f0000000480)=""/173, 0xad) 04:25:45 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', 0x0}) 04:25:46 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(0xffffffffffffffff, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:46 executing program 3: r0 = socket(0x22, 0x2, 0x4) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) 04:25:46 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000680)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0}}], 0x2, 0x40081) [ 377.502758][ T8552] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:46 executing program 3: setresuid(0x0, 0xee01, 0x0) setresgid(0x0, 0x0, 0x0) 04:25:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) 04:25:46 executing program 3: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x940, 0x0) 04:25:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x781}, 0x14}}, 0x0) 04:25:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 04:25:46 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) 04:25:46 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(0xffffffffffffffff, r0) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:46 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:46 executing program 3: r0 = socket(0x22, 0x2, 0x23) setsockopt$inet_udp_int(r0, 0x29, 0x0, 0x0, 0x300) [ 378.349540][ T39] audit: type=1400 audit(1656735946.984:342): avc: denied { setopt } for pid=8564 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 378.357490][ T8570] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:47 executing program 2: syz_io_uring_setup(0x60a4, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) [ 378.375214][ T8572] delete_channel: no stack 04:25:47 executing program 3: add_key$keyring(&(0x7f0000000100), 0xfffffffffffffffc, 0x0, 0x0, 0x0) 04:25:47 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x800) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x5}}, {0x2, 0x0, @local}, 0x6}) socket$nl_route(0x10, 0x3, 0x0) 04:25:47 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_udp_int(r0, 0x29, 0x49, 0x0, 0x300) [ 378.419305][ T39] audit: type=1400 audit(1656735947.054:343): avc: denied { accept } for pid=8580 comm="syz-executor.2" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 04:25:47 executing program 3: prctl$PR_SET_NAME(0xf, &(0x7f0000000240)=']^]{\x00') 04:25:47 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:47 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_udp_int(r0, 0x29, 0x1, 0x0, 0x0) 04:25:47 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 379.248034][ T1352] ieee802154 phy0 wpan0: encryption failed: -22 04:25:47 executing program 2: r0 = socket(0x22, 0x2, 0x23) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) [ 379.251532][ T8595] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 379.252439][ T1352] ieee802154 phy1 wpan1: encryption failed: -22 04:25:47 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val], &(0x7f0000000380)='syzkaller\x00', 0xe903, 0x81, &(0x7f00000003c0)=""/129, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 379.274518][ T8596] delete_channel: no stack 04:25:47 executing program 2: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 04:25:47 executing program 3: r0 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x40049409, 0x0) 04:25:47 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xdb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 379.603299][ T6115] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 379.853288][ T6115] usb 7-1: Using ep0 maxpacket: 8 [ 379.983338][ T6115] usb 7-1: unable to get BOS descriptor or descriptor too short [ 380.043327][ T6115] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 380.048294][ T6115] usb 7-1: can't read configurations, error -71 04:25:48 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:48 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_udp_int(r0, 0x29, 0x1b, 0x0, 0x300) 04:25:48 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0xda78a2e696d36537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) [ 380.115831][ T8614] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:48 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc0844123, &(0x7f0000000040)) 04:25:48 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_udp_int(r0, 0x29, 0x22, 0x0, 0x0) 04:25:48 executing program 3: pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) 04:25:49 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@private1}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0x37) sendto$inet(r0, &(0x7f00000001c0)="85475f94c6b474246da352a3b586cce9cb7a365d2b45b515ad68a954565ab6aaf7652788dc063f9f8fe645304c10c80159898d7c9941f510e21b807182dc386d931dd732a4d1f09f5d91040f0adceeadbe8a2c45b292091b29eeb5dce4ba12ea6c78ad389616807a74c875f72c63a23caa92e27a6eaecd348505e3c4696d3bf1a63c5a4ed85567eb4ae0bf4356c20fb56f7328cd3c45627b81ccf7f4ddb2235728a35e7e8999f97ba7944fbfeb4531e5faf4eb0d889fab4af2eaf14baa607ca2369452b1106765812e855157ba7cd27134873c0fa48214626949559af89b5060f759fb9abae7142495593d5cfef3", 0xee, 0x50881, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000340)={0x6, 0x0, 0x4, 0x201}) pipe2$9p(&(0x7f0000000300), 0x80000) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {}, {0x2, 0x40, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x0, @rand_addr=0x7ff}, 0x6, 0x0, 0x0, 0x0, 0x200}) 04:25:49 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_udp_int(r0, 0x29, 0x3, 0x0, 0x300) 04:25:49 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0x1000000000016) 04:25:49 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:49 executing program 2: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_udp_int(r0, 0x29, 0x19, 0x0, 0x300) 04:25:49 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_udp_int(r0, 0x84, 0x22, 0x0, 0x0) 04:25:49 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) [ 380.978034][ T8636] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:49 executing program 3: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_udp_int(r0, 0x29, 0x11, 0x0, 0x0) 04:25:49 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) [ 381.054223][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 381.077724][ T8647] 8021q: adding VLAN 0 to HW filter on device bond1 04:25:50 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:50 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) gettid() tkill(0x0, 0x1000000000016) 04:25:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000540)) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 04:25:50 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:50 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) [ 381.857728][ T8658] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:50 executing program 2: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:50 executing program 2: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:50 executing program 2: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:50 executing program 2: r0 = socket$inet(0x2, 0x0, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:50 executing program 2: r0 = socket$inet(0x2, 0x0, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:51 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) gettid() tkill(0x0, 0x1000000000016) 04:25:51 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000540)) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 04:25:51 executing program 2: r0 = socket$inet(0x2, 0x0, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) [ 382.705192][ T8683] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:51 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:51 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:51 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:51 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:52 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:52 executing program 2: socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000540)) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 04:25:52 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) gettid() tkill(0x0, 0x1000000000016) 04:25:52 executing program 2: socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:52 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 383.560258][ T8718] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:52 executing program 2: socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, 0x6}) 04:25:52 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:25:52 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) 04:25:52 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:25:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2], 0x48}}, 0x0) [ 383.969896][ T8734] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 04:25:53 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) 04:25:53 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:25:53 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x0) 04:25:53 executing program 3: r0 = mq_open(&(0x7f0000000000)='(&\x00', 0x41, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 04:25:53 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000340)) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:53 executing program 3: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) 04:25:53 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) [ 384.441776][ T8743] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:53 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}}) 04:25:53 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}}) 04:25:53 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}}) [ 384.723589][ T5496] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 384.964575][ T5496] usb 8-1: Using ep0 maxpacket: 32 [ 385.093399][ T5496] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 385.253464][ T5496] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 04:25:53 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="580000000000000000000000000000009b3d2fffa24a7bedb6a15f910fac8fde5715efee32f9b08fb0d9a0177ebfc4de2ce308aa99844e2317636421ca82deb97a2061420b4588b9f5987800"/88], 0x58}, 0x0, 0x804}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110003) 04:25:53 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x0) 04:25:53 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000340)) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 385.260273][ T5496] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150 [ 385.267795][ T5496] usb 8-1: Product: syz [ 385.271748][ T5496] usb 8-1: Manufacturer: syz [ 385.275770][ T5496] usb 8-1: SerialNumber: syz [ 385.282266][ T8765] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 385.284691][ T5496] usb 8-1: config 0 descriptor?? [ 385.341648][ T39] audit: type=1400 audit(1656735953.974:344): avc: denied { write } for pid=8759 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 385.345038][ T5496] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 385.364499][ T5496] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 387.468111][ T3753] usb 8-1: USB disconnect, device number 15 04:25:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="580000000000000000000000000000009b3d2fffa24a7bedb6a15f910fac8fde5715efee32f9b08fb0d9a0177ebfc4de2ce308aa99844e2317636421ca82deb97a2061420b4588b9f5987800"/88], 0x58}, 0x0, 0x804}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110003) 04:25:56 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000340)) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="580000000000000000000000000000009b3d2fffa24a7bedb6a15f910fac8fde5715efee32f9b08fb0d9a0177ebfc4de2ce308aa99844e2317636421ca82deb97a2061420b4588b9f5987800"/88], 0x58}, 0x0, 0x804}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110003) 04:25:56 executing program 1: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1f0000001000ff00fd4354c007110000f305030205000100130423dcffdf00", 0x3f2) ppoll(&(0x7f0000000000)=[{r0, 0x4001}], 0x1, 0x0, &(0x7f00000000c0)={[0x5]}, 0x8) dup2(r1, r0) r2 = gettid() tkill(r2, 0x0) [ 387.490794][ T3753] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 387.505950][ T8777] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:25:56 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:56 executing program 3: r0 = socket(0x1, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) sendmsg$inet_sctp(r2, &(0x7f0000000340)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="100000008400000009000000ac1400bb100000008400000009000000ac1400aa100000008400000009000000e0000001180000008400000007000000030000007f"], 0x54}, 0x0) 04:25:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:56 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="580000000000000000000000000000009b3d2fffa24a7bedb6a15f910fac8fde5715efee32f9b08fb0d9a0177ebfc4de2ce308aa99844e2317636421ca82deb97a2061420b4588b9f5987800"/88], 0x58}, 0x0, 0x804}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110003) 04:25:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xa, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}]}}}]}, 0x40}}, 0x0) 04:25:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:57 executing program 1: syz_emit_ethernet(0x1a, &(0x7f0000000000)={@link_local, @remote, @val={@void}, {@llc_tr={0x11, {@snap={0x0, 0x0, "d4", "3115d9"}}}}}, 0x0) 04:25:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:57 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)='L', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)='l', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, &(0x7f0000003100)=[{&(0x7f0000000700)="cf", 0x1}], 0x1}}], 0x3, 0xc0) 04:25:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x190) 04:25:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000200)='x', 0x1}], 0x1, &(0x7f0000000340)=[@dstopts={{0x18}}], 0x18}, 0x0) 04:25:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)='L', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)='l', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, &(0x7f0000003100)=[{&(0x7f0000000700)="cf", 0x1}], 0x1}}], 0x3, 0xc0) 04:25:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(0xffffffffffffffff, r0, 0x0, 0xf6c1) 04:25:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@loopback, @mcast2, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 04:25:57 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:57 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003200)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000004c0)='g', 0x1}], 0x1}}], 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.cpu_exclusive\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) 04:25:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(0xffffffffffffffff, r0, 0x0, 0xf6c1) 04:25:57 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 04:25:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)='L', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)='l', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, &(0x7f0000003100)=[{&(0x7f0000000700)="cf", 0x1}], 0x1}}], 0x3, 0xc0) 04:25:57 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(0xffffffffffffffff, r0, 0x0, 0xf6c1) 04:25:57 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0x5402, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 04:25:57 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf6c1) 04:25:57 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:57 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') write$cgroup_int(r0, &(0x7f0000000180), 0x12) 04:25:57 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0x5402, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 04:25:57 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf6c1) 04:25:58 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf6c1) 04:25:58 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0xda000000, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/219, 0x1a, 0xdb, 0x1}, 0x20) [ 389.392169][ T39] audit: type=1400 audit(1656735958.024:345): avc: denied { setcurrent } for pid=8858 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 04:25:58 executing program 1: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) 04:25:58 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 04:25:58 executing program 1: prctl$PR_MCE_KILL(0x27, 0x3, 0x0) 04:25:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:58 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0xcc953580bfb20fd7, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 04:25:58 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/118, 0x2) 04:25:58 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:25:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:58 executing program 1: openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000680), 0x80040, 0x0) 04:25:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:58 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:25:58 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:58 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)) 04:25:58 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:25:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(0x0, 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000001900)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000040)="df", 0x1}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000001240)={&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000001180)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) 04:25:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(0x0, 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:58 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:25:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(0x0, 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:58 executing program 2: ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:25:58 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:58 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:58 executing program 2: ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:25:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000001900)={&(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000040)="df", 0x1}], 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000001240)={&(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000001180)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) 04:25:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:59 executing program 2: ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:25:59 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:59 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:25:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:25:59 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:25:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:00 executing program 1: prctl$PR_MCE_KILL(0x3a, 0x3, 0x0) 04:26:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:26:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:00 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:00 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:26:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) 04:26:00 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:26:00 executing program 1: mq_open(&(0x7f0000000040)='#\x00', 0x2, 0x0, 0x0) 04:26:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:00 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1014]}) 04:26:00 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 04:26:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, 0x0) 04:26:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, 0x0) 04:26:00 executing program 1: mq_open(&(0x7f0000000b40)='#\x00', 0x0, 0x0, 0x0) 04:26:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, 0x0) 04:26:00 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:00 executing program 1: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 04:26:00 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000001c0)={"bc88742674a2ebfacdbf71a086c6c71a20ca09af0a947539eac7f2bc03e6"}) 04:26:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x0, 0xffffff80, 0x178, 0xc, 0x178, 0x488, 0x258, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x348, 0x0, {0x0, 0x8400000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"ab83"}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 04:26:00 executing program 2: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB="d8a600000000000045"]}) 04:26:00 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:00 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, &(0x7f0000000180)=""/213, 0xd5, 0x0, 0x0, 0x0) [ 392.390416][ T9001] x_tables: ip6_tables: mh match: only valid for protocol 135 04:26:01 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x0, 0xffffff80, 0x178, 0xc, 0x178, 0x488, 0x258, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x348, 0x0, {0x0, 0x8400000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x0, 0x64}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"ab83"}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) [ 392.495475][ T9011] xt_bpf: check failed: parse error 04:26:01 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 04:26:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000140)=0x8) 04:26:01 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:01 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvfrom(r0, 0x0, 0x0, 0x40083, 0x0, 0x0) 04:26:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative'}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) [ 392.831400][ T9033] tmpfs: Bad value for 'mpol' 04:26:01 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 04:26:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative'}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) [ 392.886913][ T9041] tmpfs: Bad value for 'mpol' 04:26:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 04:26:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0), 0x98) 04:26:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative'}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) [ 392.920996][ T9046] tmpfs: Bad value for 'mpol' 04:26:01 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x0]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:01 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5406}, 0x43) sendmmsg$unix(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000200)="866a618ba3cb3808c03560168109c28b1bf019a0fcfbd7dda0901e01141861e14d78439e63ad87b5f357ea778abf80717fa8a95bce74b568b2ea79f0108cad9ce327e62d118519212da2f3e9ddac7763d0dcabebce55b8e82eea96db0e26103ef4bbf976e0b88bfa2a5263b8033b29d9cd6b8cc95130f313ad4d2740cb35f306f238a7954e40a3a9ba0819efd07121c5a4927340c959601575cfa85df09ddc4d527b29e0706b9efc18f7fc28f6359385dd57af5de24c96335d54485112ba9a43", 0xc0}], 0x1, &(0x7f0000000500)=[@rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0x24004000}}], 0x1, 0x24048191) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x2, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xd, 0xfff1}, {0x0, 0x10}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000009004792f244f9f31b3a2e05e2080000000000002f0c000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000008a0a0000030000"]) close(r0) r4 = openat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 04:26:01 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40003) [ 393.168251][ T9051] tmpfs: Bad value for 'mpol' 04:26:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x0]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) 04:26:01 executing program 1: getresgid(&(0x7f0000000c80), 0x0, &(0x7f0000000d00)) [ 393.217326][ T9062] tmpfs: Bad value for 'mpol' 04:26:01 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000240)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000240)={0x1c, 0x1c, 0x1}, 0x1c) r4 = dup2(r3, r3) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x26, &(0x7f0000000180)={r2}, &(0x7f00000001c0)=0x8) 04:26:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x0]}}}}]}) sendfile(r1, r0, 0x0, 0xf6c1) [ 393.270598][ T9070] tmpfs: Bad value for 'mpol' 04:26:02 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(0xffffffffffffffff, r0, 0x0, 0xf6c1) 04:26:02 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5406}, 0x43) sendmmsg$unix(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000200)="866a618ba3cb3808c03560168109c28b1bf019a0fcfbd7dda0901e01141861e14d78439e63ad87b5f357ea778abf80717fa8a95bce74b568b2ea79f0108cad9ce327e62d118519212da2f3e9ddac7763d0dcabebce55b8e82eea96db0e26103ef4bbf976e0b88bfa2a5263b8033b29d9cd6b8cc95130f313ad4d2740cb35f306f238a7954e40a3a9ba0819efd07121c5a4927340c959601575cfa85df09ddc4d527b29e0706b9efc18f7fc28f6359385dd57af5de24c96335d54485112ba9a43", 0xc0}], 0x1, &(0x7f0000000500)=[@rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0x24004000}}], 0x1, 0x24048191) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x2, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xd, 0xfff1}, {0x0, 0x10}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000009004792f244f9f31b3a2e05e2080000000000002f0c000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000008a0a0000030000"]) close(r0) r4 = openat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 04:26:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="f9", 0x1}], 0x1, 0x0, 0xd4}, 0x0) close(r0) 04:26:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(0xffffffffffffffff, r0, 0x0, 0xf6c1) 04:26:02 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:02 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5406}, 0x43) sendmmsg$unix(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000200)="866a618ba3cb3808c03560168109c28b1bf019a0fcfbd7dda0901e01141861e14d78439e63ad87b5f357ea778abf80717fa8a95bce74b568b2ea79f0108cad9ce327e62d118519212da2f3e9ddac7763d0dcabebce55b8e82eea96db0e26103ef4bbf976e0b88bfa2a5263b8033b29d9cd6b8cc95130f313ad4d2740cb35f306f238a7954e40a3a9ba0819efd07121c5a4927340c959601575cfa85df09ddc4d527b29e0706b9efc18f7fc28f6359385dd57af5de24c96335d54485112ba9a43", 0xc0}], 0x1, &(0x7f0000000500)=[@rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0x24004000}}], 0x1, 0x24048191) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x2, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xd, 0xfff1}, {0x0, 0x10}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000009004792f244f9f31b3a2e05e2080000000000002f0c000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000008a0a0000030000"]) close(r0) r4 = openat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 04:26:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(0xffffffffffffffff, r0, 0x0, 0xf6c1) 04:26:02 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf6c1) 04:26:02 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf6c1) 04:26:02 executing program 2: sigaltstack(&(0x7f0000ffa000), 0x0) mlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) 04:26:02 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r0, 0xffffffffffffffff, 0x0, 0xf6c1) 04:26:02 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0x0) 04:26:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000040), &(0x7f0000000080)=0xc) 04:26:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x39, 0x0}, 0x0) 04:26:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0x0) 04:26:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x31]}}}}]}) sendfile(r1, r0, 0x0, 0x0) 04:26:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) sendto(r0, &(0x7f0000000000)="c3", 0x1, 0x0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) 04:26:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x3f}, 0x8) 04:26:03 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) dup2(r1, r0) 04:26:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) 04:26:03 executing program 1: setresuid(0x0, 0xee01, 0x0) socketpair(0xa, 0x3, 0x1, 0x0) 04:26:03 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@random="0fd2ad4a0a2e", @empty, @val, {@ipv4}}, 0x0) 04:26:03 executing program 1: link(&(0x7f0000000000)='.\x00', 0x0) 04:26:03 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendto$inet6(r1, &(0x7f00000001c0)="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", 0xff1, 0x0, &(0x7f0000001240)={0x1c, 0x1c}, 0x1c) 04:26:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000100)=';', 0x1}], 0x1, &(0x7f0000000640)=[@sndrcv={0x2c}], 0x2c}, 0x0) 04:26:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000100), &(0x7f0000000000)=0x39) 04:26:03 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@random="854a3fed9635", @local, @val, {@ipv4}}, 0x0) 04:26:03 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:03 executing program 2: r0 = socket(0x1c, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r1, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) r2 = dup2(r1, r0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) r3 = dup(r0) sendmsg$inet_sctp(r3, &(0x7f0000000480)={&(0x7f0000000340)=@in={0x10, 0x2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)='~', 0x1}], 0x1}, 0x0) 04:26:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040), 0x88) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240), 0x88) 04:26:03 executing program 1: symlinkat(&(0x7f00000010c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00') 04:26:03 executing program 3: r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38}, 0x7, 0xfff, 0x0, 0xffffffffffffffff, 0xffffffffffff8001, 0x3, 0x7}) 04:26:03 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 04:26:03 executing program 1: msgget$private(0x0, 0x0) symlinkat(&(0x7f00000010c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00') 04:26:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0xa) 04:26:03 executing program 2: syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0xc800) 04:26:03 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x14401) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0xda9, 0x6, 0x7fffffff, 0x80000000, 0x0, "40234eaca5cd04c08035f9dfa9f564c1509a8b", 0x0, 0x5}) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x4}) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000140)={0x5, 0x6ae, 0x7fffffffffffffff, 0xffffffffffff1741, 0xfffffffffffffffd}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x8, 0x401, 0x2000, 0xe9, 0x10, "f648c6a304a8f5ae"}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x8, 0x6, 0xffffff80, 0x9, 0x19, "72c56049075bb1a18e5c5477578085bda942a9"}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfff) ioctl$TCSBRKP(r3, 0x5425, 0x101) syz_open_pts(r1, 0x200401) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x5) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) 04:26:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0306000000000000000005"], 0x24}}, 0x0) 04:26:03 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 395.053319][ T9175] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 04:26:03 executing program 1: r0 = socket(0x10, 0x2, 0x9) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001740)={0x4c}, 0xd00}}, 0x0) [ 395.086653][ T9183] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=9183 comm=syz-executor.1 04:26:03 executing program 1: io_setup(0x8d, &(0x7f0000001140)=0x0) io_pgetevents(r0, 0x6, 0x0, 0x0, 0x0, 0x0) io_setup(0xe0cc, &(0x7f00000012c0)=0x0) io_destroy(r1) 04:26:03 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x14401) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0xda9, 0x6, 0x7fffffff, 0x80000000, 0x0, "40234eaca5cd04c08035f9dfa9f564c1509a8b", 0x0, 0x5}) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x4}) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000140)={0x5, 0x6ae, 0x7fffffffffffffff, 0xffffffffffff1741, 0xfffffffffffffffd}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x8, 0x401, 0x2000, 0xe9, 0x10, "f648c6a304a8f5ae"}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x8, 0x6, 0xffffff80, 0x9, 0x19, "72c56049075bb1a18e5c5477578085bda942a9"}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfff) ioctl$TCSBRKP(r3, 0x5425, 0x101) syz_open_pts(r1, 0x200401) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x5) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) 04:26:03 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x14401) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0xda9, 0x6, 0x7fffffff, 0x80000000, 0x0, "40234eaca5cd04c08035f9dfa9f564c1509a8b", 0x0, 0x5}) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000080)) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x4}) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000140)={0x5, 0x6ae, 0x7fffffffffffffff, 0xffffffffffff1741, 0xfffffffffffffffd}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000180)={0x8, 0x401, 0x2000, 0xe9, 0x10, "f648c6a304a8f5ae"}) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x8, 0x6, 0xffffff80, 0x9, 0x19, "72c56049075bb1a18e5c5477578085bda942a9"}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfff) ioctl$TCSBRKP(r3, 0x5425, 0x101) syz_open_pts(r1, 0x200401) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x5) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) 04:26:03 executing program 3: socket(0x1, 0x3, 0x2) 04:26:03 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local, @random="4dc552d72f86", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "283710", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local}}}}, 0x0) 04:26:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4}]}, 0x24}}, 0x0) 04:26:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 04:26:03 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:03 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) 04:26:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x29, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) 04:26:03 executing program 3: io_pgetevents(0x0, 0x0, 0x7, &(0x7f0000000400), 0x0, &(0x7f0000000080)={&(0x7f00000003c0), 0x7}) 04:26:04 executing program 3: mkdirat(0xffffffffffffff9c, 0x0, 0x0) 04:26:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891a, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2}}) 04:26:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000100), 0x8) 04:26:04 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) 04:26:04 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891a, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2}}) 04:26:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000180)) 04:26:04 executing program 1: add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, 0x0, 0x2, 0x0) 04:26:04 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fchown(r0, 0x0, 0xee01) 04:26:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x800, 0xfff}) [ 395.582302][ T39] audit: type=1400 audit(1656735964.214:346): avc: denied { setattr } for pid=9227 comm="syz-executor.2" name="fuse" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 04:26:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, 0x2, &(0x7f0000002780)=[{&(0x7f0000000500)="f8245fa03ac415b590ee4c390bdfb3", 0xf}, {0x0, 0x0, 0x38000}], 0x0, &(0x7f0000002840)) 04:26:04 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040)={0x1ff}, 0x10) 04:26:04 executing program 1: openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x208000}, 0x18) 04:26:04 executing program 2: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x1f]) 04:26:04 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) 04:26:04 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:04 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) 04:26:04 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 04:26:04 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) 04:26:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0/file0\x00'}, 0x6e) 04:26:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) [ 395.798244][ T39] audit: type=1400 audit(1656735964.434:347): avc: denied { ioctl } for pid=9248 comm="syz-executor.1" path="pid:[4026532845]" dev="nsfs" ino=4026532845 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 04:26:04 executing program 3: syz_io_uring_setup(0x730e, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x208}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 04:26:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x13, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast1}}}, 0x108) 04:26:04 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x40, 0x17, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x0) 04:26:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x6, 0x0, 0x0) 04:26:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x13, 0x0, 0x0) 04:26:04 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 04:26:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8107) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) pipe2(&(0x7f0000000200), 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x804c011) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f00000006c0)='attr/prev\x00') 04:26:04 executing program 2: clock_gettime(0xb, &(0x7f0000000380)) 04:26:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) fchown(r0, 0x0, 0x0) 04:26:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) [ 396.079043][ T39] audit: type=1400 audit(1656735964.714:348): avc: denied { setattr } for pid=9275 comm="syz-executor.3" name="NETLINK" dev="sockfs" ino=57512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 04:26:04 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:04 executing program 3: syz_clone3(&(0x7f0000007100)={0x10060000, 0x0, 0x0, 0x0, {}, &(0x7f0000006f80)=""/17, 0x11, 0x0, 0x0}, 0x58) 04:26:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x100, 0x800, 0xfff}) 04:26:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000140)=0x4, 0x4) 04:26:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x14, 0x0, 0x0) 04:26:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0xd, 0x0, 0x0) 04:26:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100}) 04:26:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x7, 0x0, 0x0) 04:26:05 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x15, 0x0, 0x0) 04:26:05 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) 04:26:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000140)) 04:26:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@rthdr_2292={{0x18}}], 0x18}}], 0x2, 0x0) 04:26:05 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private=0x3e8}, 0x10, 0x0}}], 0x1, 0x0) [ 396.499534][ T9301] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:26:05 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}}}) 04:26:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@delqdisc={0x24, 0x25, 0x4b1e22d0d671ba5d}, 0x24}}, 0x0) 04:26:05 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:05 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0, 0x1100, &(0x7f00000005c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x38}}], 0x1, 0x0) 04:26:05 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x1401, 0x3cc8baec5279a213}, 0x10}}, 0x0) 04:26:05 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x2}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x38}}], 0x1, 0x0) 04:26:05 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0}}], 0x1, 0x4c00) [ 396.785289][ T39] audit: type=1400 audit(1656735965.424:349): avc: denied { create } for pid=9318 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 04:26:05 executing program 1: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 04:26:05 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x1401, 0x3cc8baec5279a213}, 0x10}}, 0x0) [ 396.804748][ T39] audit: type=1400 audit(1656735965.424:350): avc: denied { write } for pid=9318 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 396.818689][ T39] audit: type=1400 audit(1656735965.444:351): avc: denied { create } for pid=9327 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 04:26:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x1, 0x0) [ 396.832724][ T39] audit: type=1400 audit(1656735965.454:352): avc: denied { write } for pid=9327 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 04:26:05 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x3d, 0x0, &(0x7f0000000180)) 04:26:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007280)={0x0, 0x0, &(0x7f0000007240)={&(0x7f0000000300)=@newtaction={0x1ec4, 0x30, 0x0, 0x0, 0x0, {}, [{0x1eb0, 0x1, [@m_gact={0x130, 0x0, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}]}, {0xf5, 0x6, "447f921d23bd4fcfcc96e3e7226b2d1b36a9fb9b48a500ddd1af6c199b25171bc5058349faa49f67ec00c39e07294fb4aee54d7edefdfc4c2f3951782ba485644cb44701a647f731db1bf1405c790dd502fe4e0e79469e2e8b94436f349aa7cff90eab3a3dffba0e5021b53482572ca485d43b76c67c5306edc51560413582ae54467257f40885e8583c39624d2f3b498a491ebdce378df3b1a0e3b675db9a0e866c96c07e587b54c550107c10385768efbc77032e51290e4f65d08ade2cc6e892c54daebbd33448ae8b0b3616ba6810dcfeeb54730b62d3a72d93e805833a1e0a76e461cfc189cfd690c1cd3e24342fd2"}, {0xc}, {0xc}}}, @m_ife={0xac, 0x0, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x34, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}]}, {0x29, 0x6, "a3757a12b15bb4fb6e2f51169ac6035b16f3edc1ba68c4409878ce0a5b109845272b774483"}, {0xc}, {0xc}}}, @m_mirred={0x98, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x49, 0x6, "b83317b5a3fddca7e09eeaeacc3a702bbfd0ffc09aac03721dc0b07391252a56568f2beeb9404286282896e07a0fdcde1de2970ea6e78836c764145f28b85f54b94545a67a"}, {0xc}, {0xc}}}, @m_skbedit={0x10c, 0x0, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0xb5, 0x6, "6c28faed252ad7632d05ba7861446f46022f06d63efc0c239f9914a2012ae272b348ea733546944e27730de3cf1c848951d568c4c536e524a00c18955797d4de911b671b94fd0b6017377cf67d1e4bb8b92c613857a2744b1c1c38de1ce61ec500baac560a46bb809d3ee5cfdcd5bc4f56605730a6fb259ba38f71aa6879b01c0982431e40ebd19729b124a407d42b421aea5e06a25af708007637a30d3cbd254839108340b9e20db337f461bc859832dd"}, {0xc}, {0xc}}}, @m_ipt={0x12d4, 0x0, 0x0, 0x0, {{0x8}, {0x1278, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xf1, 0x6, {0x0, 'filter\x00', 0x0, 0x0, "a1398ed942bc3e3c58501e34edd89332d540fcaaa23547aec712cc24af9819acc6feb62550a1045f843938a2ab411434c74c935d1d011fe0c4d45d7b0c4f17519c2097ad09d0f95938b5bec8c3eb534f361ca564ac880277aca4978a9885240fdc54f8d9e857f89b2e9a48f11e5529a61297ef236367f2163db0f911538872fe76b9f95c11aff0ce939d95cbf158b81e67f2d439e498f06e594d5a8e0ebda474134beddba810157381afff89e2ce4ee3f7d4da4649a56ea6a4f0d98bbec50aecd3e52a01c348a6"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x1029, 0x6, {0x0, 'nat\x00', 0x0, 0x0, "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"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0x0, 0x0, "3bc8e01414ca121015becea50d5fe848e4df081e27181f1ae936f72d91a0a8ef2844eb00357186cb8e589209cd1385a7ec7789929b26b73159c6d1c18d68a2adcebe02f6dd93211452f88d010750a67ef5d02e67f4f501ee041338c6e824220742518e7c21842b38517966d375a95195e2fca84a1f2afc406f0fa448b3c4d2156e09002659aefe4fec4d3b80b0346270a048492570b320ee453d045efd871c2107bdec17ddb423a2344f27824177283a94f167529f97c7faf6d8aa9093c5c0a43183c00c17a96a"}}]}, {0x35, 0x6, "c374b44d4953578e56651de3c88e4a8d0aada2c8c7df906e4c67b86bd442da823f1c2734f8b4e44d65551c97ccbffa35e2"}, {0xc}, {0xc}}}, @m_mpls={0x858, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x829, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x1ec4}}, 0x0) 04:26:05 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000280)=""/239, 0x2a, 0xef, 0x1}, 0x20) 04:26:05 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:05 executing program 2: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)='6', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}], 0x20}}], 0x2, 0x240400d1) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @bcast, r0}) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x1000) [ 397.034513][ T39] audit: type=1400 audit(1656735965.674:353): avc: denied { getopt } for pid=9335 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x4c, 0x42, 0x4, 0x0, 0x0, "", [@generic="0ff2ff6c1970f6bf17f48f9693f1a1322128844b8c546b871263c16137653a1532afa502310e983153373adbd8fbbda913dd54b7242b3a7bc5bd"]}, 0x4c}, {&(0x7f0000000100)={0x2c, 0x32, 0x200, 0x70bd26, 0x25dfdbfe, "", [@generic="3aa74f7b38f134ead1088433952afcab904b0f22923da31129"]}, 0x2c}, {&(0x7f00000007c0)=ANY=[@ANYBLOB="181000002500000131bd7000fddbdf250800c800", @ANYRES32=r0, @ANYBLOB="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"], 0x1018}, {&(0x7f0000002d00)=ANY=[@ANYBLOB="0c130000420000002bbd7000fcdbdf2517a8fffdce64b0d7351e7abdb48d068b23ac22efa2f926036d0372a7b9b871497f3996a97f61628da51772111c0d4f4510d68afa62f46d01734a6ade04e9b75b9af4d5e46884cff3cdf499c9b0c6e882eecddc038f547b86b396a329a10def6b4ce44bf6b23a9c0d86b6baccce6fe82cb132c484d0bb063e91dc8d188567f9b6ee0bdb853f07743e393557c0ac0e79687c8af82d5198805f1ca8cbbd9753438c7af277be7caf78e5deda842d977a7cce0604ca3148e94ec0e48a9a3527cfe50fb278f5e8fa6082d130a7503f39b33fddb2fee07a43b11069bae43cd1a848457d6f083b64e259f5c3ffd6f9b680f74598f18fe240dbc8781351fcc76bd75ae0dd25811306aeb644b8dabee26f834d52a3707240fccc64cb382a831344de51b2423e1c56783791e256803dc56e759d7b9655c15b10a7b36277129f1974f80aac517b54c845a4ec8d29237463dcff0891fab8c4acdefece831fefd905d74be8eb332aee319165dc5ddecc567c6698cae6da53963c4691487d002496d28ebb00dda0d8d5bb580deca8042bc9f995b62f9297903e015a80f33d7b04d63da749e3ee38fef2b8115e126caffeacb8ac5e8053050847967461daafd231341cbb303891eb64e38125f40664dc2daad0379c1cdd2ab0efcbdab6c37a49f11acea7faeb5a48c161cc5e0d5f39449c6270e68e2f2170c9db6b0933575e9d4d6df73d646e0a1c9f9371e7e0af2fab12158a0c229b55087e945bbc361b24cd4c2a805e8e77e5689f1a5d28cb1ab9f58b57907790d632baa4fa9098d4d1c588c95b6ef8d15ca9309e56bf6496407f4697c685ea9ca64df5559ed42add7046c65c21881ff4a8088fc81d7483131c4841d47ce091faf80bdbd5241434fe684f049885c7c6e6d2609059b4f8caeca9ba8f1c31e6189e928ad702cc42bccc5857860814815430aa0576ff150ef527758d062ccabebf9617c0f2c7526d3fc5f5b596510b9c23f842cb4ab842e4a4fb18947ca1a11c496d63fd15bb1fe9c0b7d1947c6194a38625a7f76369b8640a14ec1b3af5ff94362485e4889a5ae12b7ab52bf6dbf0a5fd6080a6e0ec785351e70edb8b34c8e9c64468393b6488e132cb6b496596cae6b2db07ab0780747c551cb8ed54759c69b912cd5598677f95a0d9dc8473dac82838c0d553a1c2df5f73f2c994c55ec311eff017f49ac081979a2d0e53d1435f315c447d83727668a582e0222821853f910b6c474c7801091941e7df5573c5e7c1bee2ad3b4af72c9c4cc6e1bfcf425df33d636168b552b5c59f7d4e20cd2e36a6df224ae3062cca12e6a95a817bfb6bf1815dc1a5bd3aabf30cc3ab947ce031a20aa8824aeae0f8e4d31b22d382eccd7134eedf1c1ee1f48975ec7818b912732fd7494a03d5ea7678f7ad5fd5bf465b2a59b5b83e88a16b13e4fd51671f1032a7de1913bde27a526c403ee76529a2949c047db485af2883edb52b97e00dbf518319ffd5539d1fe6add6393047770f660182cfb9325bf74c4e32199702de6f434463a56c1617f933dda300122120d54aafb768e1461d7d2ee893ca5067e2325601755efa34932d3268784a5cba66e6cd6b53f899860206d125db9e04f0754b059d1f8352afeb935e31e55ba1d5e1ca555f51941568df4488c5711d8c69882ab055c5990c92060c11195be0fd94b893b42043856f4038a500f5f057f021dd9c838be52965506edbaf2e07290cec69f9c0c29d03b35d200ff52de23c6b276c07b49357064f6f76d3d9be751ea70735ebf98ccd69d42205a22d33455004e6ded4c8b05a04bb2e3e9daf603b5a8a5894e9cff13ef6d9058535e8913135f47db7353fb7944748ff3df10c27e9cdc01381aedb9af07dfcea0fbd08a665a7cdada90bb2ec262ac71c9c145c56631e34d1f7de047a69e989f5b072db5f57582c09fc117b470f370ec23296d07fd0a1a6db9caa1c1c45dd9735991b0f6534e393c15030cd80475ba3a00676822741948c596611b4bfafecd9eb176b28ff0ac2df14afa9f38e1f27e7b62bbfa3fbb73bb251c84c3b9f45dd8da65387a3ac466933cfd717c51164c108e2b6a14a83d5138012a61d2d8ff82c76de5277f4f016e77f7fb250ba7ea54a3efe544dab41f4c4fb3a69c9fbf1f7b96f05c22b98793cc33f75366b91d8ae184dda4ed0b513dd9fd17fe149c6490e1ca97969ea91bc24e6ee0738c58bda99c041c4e57e19bcad5309766984a673a6746466e0327a811461e67926f5ddb3e33a80d1d486350053c47c8df405360ba2de694fbe08284154b48654e22a85e2937ca76c6f03de1c9d3fbe55ac91ad7fc4c4bdbdeab68486ab6882b39bed2d361c1a3134547fc9e69e652b0ad0b6324f4f018eff9853c5b540d9966ac9a95618651c03f0e54a48cb001de300eaf958aaf6016d053459a736c508a294831f4db1fd3f1121d486f01cf6a3249ab6a5831809fd470be888c72622da04f55dacba4d134adc6171b1a9da4bb7bc604a07b00c12bab21e42dd121c5e802e84651a1fc18a034b7611d445f4593a57f708eb8bd55d1e5886804fc5a66bcec0af1c64d5ac73736c1754181999e530d35800f88829dd4d1d61d3dbacfcf8187b757e1e18fe7af5e3da3abaf1f0a0bc691b651f81ab1cb75c857401ba7a5058ab5a62bcb5910f5d0da7ed6e69639bdf0d1a3db21cc3d86d822ca158950f5291bc758aeb4842c70cc4fbaff6dd6d536b7c046276871eb3180441f15d262e8d6c13d41683a2587a171e2a13f4aa28d475aa8e48cd23bf01ee12b362c0aaa0242c27e011654168e205c3a09b05d978d86be33f3ea03b928e9575aa3de4eb24ff8a6574ca8325ca74ac9e4e826baf09baae336a06126b6a3aec36f4cc99b1b49c2bcc6c093d96d034fa71dddde6d8c95711d2f7d0a1b9659e18aa9ffeb5808c5e8d092f0ecdfcf09666000e28cbd29ab9ebe066cc4af4cdd9e952bf8f48092f8064af85a9bb772d731c4b72af7f1ca0c0f353e53f7a0f0fb7eafba606d3332eb3e031a087f7f830c36a92ab552a15971a22d78da42806c3adb9d676927f2a8d498ae646e0c98cb683193268aabb1442635c0826fa315fefb62b73a52d2a77f2cf3ae5a3f93f2a6b5833ead9c7275e7af30afa07d94d8f4537e366dd333b35fedd5ac98db9ceafb73ca95b82b741dd47dfe382d371bfe5062d9fc3ad56208b84e05a1e7f2c6cd657adc0c9ca2a07ca89892b95352afcd375cc02ac36a14720f0e25119fd135d2bd0873ddd1b3f1565b1d27f2bb66662e88dd1a2ffa537851d9dd2faa556161e52b7a4af3a7e25eed1762f8227bfd491e606eddd71e997eff1f575bee03e1287970718b54bc370392354e73dc4f98d59c889e8263b8e4fc19c7b21ef78b9ff5e3b9a1303600ca3e7a9a9dee0a95ce240a089841d7a4cc78c680bd73a8b13cc554f1bf012fa1bd08066dad1f4f27ad47a371ad12b8fab1810bd1ce2e63f68f26a04a17b054357b70c5bded28744132fdae59a06ae5f1f1a18ae38554ac27bea4723b5b95edb81a2afd29f655cc48fde9fa2458a544b9c9ed0ddeb75073fd5918825bed5fdda4c502fd99c580cbfba02ac13f19a73a3348ddef05c5e80f5b48a8970b201bb28513558f69dffabb9cd554d8cea2dbf2a4b70f4668cdf62ca371c2cbf99f140dbe9b689def95f3c1ba7caca9395439baa11fdf609b639e4f652b0e14d1a5a77621013d10194f6f143fa5c5ab38c2bf35446f8aca3a928e7507ef2d1f34eaa185d21eebf7fb3a9ce372329fc8359041875278bf48cf3e6485ab9c3d9b2bda35ec2fad82519723ae607880363bb502a19ddcdb68a6b46419e3ee647ad648ad9617398da99746da18ba2b69566864f132b855ff77800afc411015322e7c4e0400d81924dcef8e0d8dd42baacaeb1b5600e88f119bcd1aa2c0a85cb538c5879bb1cd37629e85ac43155d1cc8c15a2572680b8ef8fb38be2c2533e1fa9b9d88696c89e1b275c19d6ff58c02020e3bc5a8bc9e386cb2962f0a4d9f848128d30f3c760fb604a4e4f301a983079ef59d51b1ba881b931956d61cdd1fc01adf76957439abb3596dd5128356650ccaa5ea117e5857e2d9a9cfc96ca21ee1670295d5fc2cd3b7537dafdbda63c447b4f7a0ed169e92ec3d3c03faa6a0f301fb1fb9f83ff3b9d93c55dee3149fd66ad716889ed3bc84c947108a741320e78ee8ef1402c39c108cfc22b484c845426d6ed5f63af4e4a9a97edc2d639672ee46a3f7e8cc1de62ec21da19677868c3703cee35eb25ecba59491fb5d9d01a64f00e10fbc9a2c85a2a59718097a39e1e845a458ba62aa44bc8ec86e7043dab71bec43690b61e5d69d76ffceb925d6907666df98e53de35f6e7b933d6956e21c2d4ab67439875b9674b85359ec9c84d6969d7e8b5d2bb4713fd9a302739c4385a6ec2021417ab18f6f5d1e80a31c66e8d8bfeaec0e904cae7ce4914863aafa92b1bdb551a10a3d20dd6b4859139fc4284ef4464fc138a1fed19ab699d67dc1f707361a80e14001145d2e44db2ba9fe785b7faea4491e21fa94d9a89ce132816404f178ebe83e3649ed96065729d9e337509d548427d6c208e08017b66d47133d5d218a8e1ae0ec8ac6b88566c7680079f520e66c3d790da538a7816670c4ec1c37c3416a0f38f83afb5326e382714b622ecf471cb4cf4bba528e0e4ddc6d841dd04cb08aa15808b18e3a285fb55a6c84d27542abde0ca49e2c9cfe7fc9b566e6a5b8955be6f94ebb78834872cb66e4c637d805918f8f984425865420748f5d3d335bc63402e8ed81b8a27828beb6b1a0926fad8a46b3e2cd0e5858573ecf419acac35b8874780cd6902f6a62d5c3908694b3bbf12749b6db594a2dee881ded63bcd02d194f0dbeb1b4d63f9b8ce82754fea62ba7e2930a893fe0479ba138770e48764f2539cd47cdadfe378daf7498f670cf97530d56869e3cc74fc620868c0218c79fea5a1403a5b0340db78237aad77512193b6b318f7f66f3f499517e09038bf040a0647d6cc77e64fd60599564b2870ee9c9f8d2f57d043263b16795a232f107be5b2f885b5c474ea0b2c294b2c67b3f22b6c5a63cb26afd0655c34bdd5adb767d2b67fbf2c3504a4e84f740419dfa749bf41e35b4f4500a7ea61fcd0d23d718d7c23bbc154ae9bcae5d9aae714572d7b470a6bd3daa008110e87c896dcd8cd5d8b8ec2c8a70440e27017d056fb7f1aa5c30c657c76b42236cc3b9c7dfcdc15b27e58882e02b93bca40a7b1cf484012b5b7a45038efe8b57e8b337d06dce311ec77d22a42269d65e70eab808215fbe33624dc5866bb4b24f369b28aa074aa43621385d4a87640985205365f4aedb066f0751230c12d53076cdd435542eb21d9f930a7b7c45ecadabcf10335ff664733a9489ce866801912701eea2daf969b3ffeac2083f2cd3130a898d8b5accf2c0459bd631f1813bec5f050e09d5d21ff805bd4da7a220f36af053ddbdc3c5c28bb1e2baa475912b7ae1a0bf59e35c79613bdeab2d0670b04776fe01275b3f3bf31e359c81776667c8e7fa7acb1ecc4182336255d8af6ebbd438d0c642e91e4032cf71a6c590baa71d328de0c6d3fc05709706432a05133fee9aa6282aae8e07a5d6eca77510d705b1e7dd1899d84a27efc75f6e6332854790f380a769e980f02dee991e21056130c23ea5afb9f992ec1309bbd6c5c25cfbe41ca21c6ec920abfe502748821415d0be2773a86153685bab2388466ee1bdc7bb60025acc5ca92d58493785ad75f575cce5477058ba5e4edab25fde57064405ffd8b4a1533bc16a394b52f8289ecd69aa52d0ba14176ce5ba502ff5fa4597316fea168745b4bd47221131287f272197f76f89b55bc6c741b2cc624728114d1f9078420a44cea5e3884b05c77e128374e2ab2865a6c98e2033a1796514ecc3adb679aacd1f8de54780b4fa27fc0561c9a8ea8e94122033e9b6bffae992b8541af15bc785310871f68a0c8b1478eef9634a6d30b5f537d255207da928538a6bb0c2504567c70b1dccff9448061ba0dc95c8a1ec0d20d7a71dd606a7854aab85a53ee93022b519b194867f4a723e9f50d06be44e96f1f71645afdb624fa99d6231eec555e76986f6adcd59edd0391f94133a3b2a1aea3c2fb65a29dfefdbd44ddfff787a0a1c724d002554b2caf6553663ed4b6a7675a05a83b032a002c6fecaa646bec2e26354b1b142f20d1ad7a83dce4beb7466cad6c52bbc94c503df43c68fcd05422b3a7c575620dd878efe46a256e4d54e3859e3731d0df6aaf5968f7c38b3b073bc5e65df87bb569618b00cbb87a4a2e19ded4d3df291da2d08dcba0cb84c67d7e2bfaba96a9f6f33e3df0ca21b11689d81e32258a7a82ae9af40ea386e58113463c573660a2a9fc9f234a8cccb0086835caff061fa20b57a5cb0ce9974b013d8055292e7ccda06f6b12f223b9cb2748741cd2c39c588fb1a72563cd8e3cdcab0a277f1916a8acbc70f8dc730e655110fdf25712ca03b8d23bc2a48d8d54dd75f9b00b20a79ed99f91b662d263e13d5e7b1bebf030752d2b67c0674c5c7a315d449b0000009229a4ad0c48b36e877638105fcdc25ad37119612b6fb43ba10a6b861a5366b359cc4149ff960265cdb1d5976ae95d571f0fdc7889a1342cd596038cffe8e6671b90bb5003c43c214033f29a58c0df082a0bc4384474eac5fe00e710a3e282025baae6e81fc129e0521af54a776eccb2f076377b8ae4389ea9e7bcadd54ea99e6361744059b5d3d8a4f2a28ee99c84140157a2053feaf400c533a41d6d241d6d4cc8d6b78ec60b1dc64ee1308ad6c64caca004f806a8882d5404fab4a9ca2a3babffc9c70a042632550de0fe36337115d7e0d8b1b677e8823f21e232051387d8180a58000000"], 0x130c}], 0x4, &(0x7f0000000300)=[@rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28, 0x4}, 0x0) getgid() r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x64f4b5f1d18c9b7a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b05d25a80648c6394f90124fc60100002400a000000053582c137153e371448018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 04:26:05 executing program 3: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 04:26:05 executing program 1: r0 = socket(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 04:26:05 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002700)=""/155, 0x9b}], 0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80) [ 397.090978][ T9348] netlink: 194472 bytes leftover after parsing attributes in process `syz-executor.2'. 04:26:05 executing program 1: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private}}}}) [ 397.103319][ T9348] netlink: zone id is out of range [ 397.106625][ T9348] netlink: zone id is out of range [ 397.112938][ T9348] netlink: zone id is out of range [ 397.117603][ T9348] netlink: zone id is out of range [ 397.121471][ T9348] netlink: zone id is out of range [ 397.127413][ T9348] netlink: zone id is out of range [ 397.133982][ T9348] netlink: zone id is out of range [ 397.138700][ T9348] netlink: zone id is out of range 04:26:05 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty=0x63, @multicast1}}}], 0x30}}], 0x1, 0x0) [ 397.144050][ T9348] netlink: zone id is out of range [ 397.150175][ T9348] netlink: zone id is out of range 04:26:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x2, 0x0) 04:26:05 executing program 3: r0 = socket(0x2, 0x2, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) 04:26:05 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}}], 0x1, 0x0) 04:26:05 executing program 1: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@private2, @empty, @ipv4={'\x00', '\xff\xff', @private}}) 04:26:05 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x800, 0x0, 0xffff6c5d, 0x0, 0x1}, 0x48) 04:26:05 executing program 3: r0 = socket(0x2, 0x2, 0x0) connect$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) 04:26:05 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0}}], 0x1, 0x0) 04:26:06 executing program 1: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private=0x7a00}, 0x10, 0x0}}], 0x1, 0x0) 04:26:06 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @generic={0x0, "16ab2a890ca64586f820dc125a83"}, @xdp, @tipc}) 04:26:06 executing program 3: r0 = socket(0x2, 0x3, 0x101) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x0, @private}, 0x10, 0x0}}], 0x1, 0x0) 04:26:06 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x4, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x288, r1}, 0x38) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 04:26:06 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:06 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 04:26:06 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0xffffffff}, 0x8) [ 397.567968][ T39] audit: type=1400 audit(1656735966.204:354): avc: denied { read } for pid=9383 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 04:26:06 executing program 2: socket(0x25, 0x1, 0x8) 04:26:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, r1, 0x8da5f7c1e7f517ff, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) 04:26:06 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000004c80)) 04:26:06 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:06 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "02cdd7521dafa4047d1810a0fc7cd2a91e916b2826df6e5fa0ffe714330ad7c952e60879414780cafe0b47d8391cc43398292fee670096fb493e1f9c338666", 0x9}, 0x60) 04:26:06 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000000000000700000094040000000000001c000000000000000000000008000000", @ANYRESDEC=0x0], 0x38}}], 0x1, 0x0) 04:26:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x4, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x288, r1}, 0x38) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 397.873575][ T39] audit: type=1400 audit(1656735966.514:355): avc: denied { bind } for pid=9403 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 04:26:06 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "02cdd7521dafa4047d1810a0fc7cd2a91e916b2826df6e5fa0ffe714330ad7c952e60879414780cafe0b47d8391cc43398292fee670096fb493e1f9c338666", 0x9}, 0x60) 04:26:06 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) 04:26:06 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@local, r1}, 0x14) 04:26:06 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$sock(r0, &(0x7f0000004a40)=[{{&(0x7f0000000380)=@un=@abs, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000400)="d6", 0x1}], 0x1}}], 0x1, 0x0) 04:26:06 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$sock(r0, &(0x7f00000045c0)=[{{&(0x7f0000000040)=@pptp, 0x80, 0x0}}], 0x1, 0x0) 04:26:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, r1, 0x201, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty=0xfffff000}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x4c}}, 0x0) 04:26:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'macvlan0\x00'}) 04:26:06 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:06 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0x5, 0xea, &(0x7f0000000300)=""/234, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:26:06 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private2}}) 04:26:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) 04:26:06 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt(r0, 0x0, 0x20, &(0x7f0000000000)="a5828ac5507bff2c2d000000", 0xc) 04:26:06 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1400000000000000000000000700000094040000000000001100000000000000000000000100000009000000000000001c"], 0x50}}], 0x1, 0x0) 04:26:06 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@empty, @broadcast, @val, {@ipv6}}, 0x0) 04:26:07 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:07 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x5, 0x7fffffff, 0x14}, 0x48) 04:26:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r0, &(0x7f0000002e00)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 04:26:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a880)=ANY=[@ANYBLOB="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"], 0xa4fc}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) 04:26:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'macvlan0\x00', {}, 0x5}) 04:26:07 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt(r0, 0x0, 0x30, 0x0, 0x0) 04:26:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x8f82e7e1aae05fa3}, 0x90) 04:26:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) sendmmsg$unix(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8090}}], 0x2, 0x0) 04:26:07 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt(r0, 0x0, 0x21, &(0x7f0000000140)="6bfa54e7", 0x4) 04:26:08 executing program 1: socketpair(0x11, 0x3, 0x6, &(0x7f0000000240)) 04:26:08 executing program 3: pipe(&(0x7f0000000a00)) 04:26:08 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x0) 04:26:08 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000009140)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x14}}, @rthdrdstopts={{0x18}}, @hoplimit_2292={{0x14}}], 0x48}}], 0x1, 0x8010) 04:26:08 executing program 2: socketpair(0x10, 0x3, 0x0, &(0x7f0000000240)) 04:26:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000140)={@private0, @private1, @private2, 0x0, 0x9}) 04:26:08 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x3}]}]}}, &(0x7f0000000140)=""/214, 0x36, 0xd6, 0x1}, 0x20) 04:26:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}}) 04:26:08 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt(r0, 0x0, 0x20, &(0x7f0000000140)="6bfa54e7", 0x4) 04:26:08 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000009140)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) 04:26:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/66, 0x42}], 0x1) sendto(r1, &(0x7f0000000080)='\x00', 0x1, 0x0, 0x0, 0x0) 04:26:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) gettid() sendmmsg$unix(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x300}}], 0x20}}], 0x1, 0x0) 04:26:08 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0x7, 0x0, [{}]}]}}, &(0x7f0000000140)=""/214, 0x2e, 0xd6, 0x1}, 0x20) 04:26:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000300)=@abs, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="7f05a1621b44ff7e7c586a4198a379e97d89a002f17f0c11ab9a508619f04b7f92"}], 0x0, &(0x7f0000000580)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}]}}, {{&(0x7f0000000680)=@abs, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)="f43d8db17c0670b7bcd804e54979f369ba12220c0f9601e8ebd1e507a5fd78d0a0599ae909a425a6935805cf199f52fce21c3a93a8fc5a74c53d0d6675e2c53278a95717030ecd7248d9b1aaae84e0e50d8938b2e5d7656a7a9e46f4d7b4394de8c31f50ef8756099a3ea73e59d21383ce6bac9da165d96ef6abb79e"}, {&(0x7f0000000780)="5f77c45da2146cd91c5b77ab32db5b977136baa57e1e26f61069c9ae4fd22c33b8ddfed5aa"}, {&(0x7f00000007c0)="48dd1d5d5f31ebf263c0e0f49989e4f3d1a0d455252f49f201fb35521e0e20cf935cc0c56a62fbabdc6995d9dadd5e4a203574760827c9cf825326b7d3e19132f73426702e06395e92e32373ff41d8c5e519b803c552bf7ee79d"}], 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32]}}], 0x40001d3, 0x0) 04:26:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000008040)=[{{&(0x7f0000000100)=@in6={0xa, 0x4e21, 0x0, @mcast1}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000240)="3d3020b0a9094de4", 0x8}], 0x1}}], 0x1, 0x0) 04:26:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}) 04:26:09 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1600bd74, 0x0, 0x8) 04:26:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x24}}, 0x0) 04:26:09 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000001e00)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, {0x0, 0x4e21}}}, 0x4c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5451, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000040)={@loopback, @private0, @private0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl2\x00', r5, 0x29, 0x9, 0x20, 0x8, 0x40, @private0, @loopback, 0x700, 0x80, 0x40, 0x5}}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x400, 0x800, 0x20, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0xb}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1000, 0x0, 0x4, 0x21, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0xffe0, 0xaa, &(0x7f00000000c0)=""/170, 0x40f00, 0x10, '\x00', r2, 0x25, r6, 0x8, &(0x7f00000001c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xb, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r7, r1, r8, r9, r10, r11]}, 0x80) [ 400.469070][ T9518] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 04:26:09 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x8, 0x0, 0x0, @empty, @broadcast}}}}) 04:26:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}}, &(0x7f00000002c0)=""/208, 0x2a, 0xd0, 0x1}, 0x20) 04:26:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x7, 0x4, 0x500, 0x7}, 0x48) 04:26:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000002c0)=""/208, 0x1a, 0xd0, 0x1}, 0x20) 04:26:09 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:09 executing program 3: syz_clone(0x9404f440, 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000100)=0x26) [ 401.107015][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 401.107122][ T39] audit: type=1400 audit(1656735969.744:359): avc: denied { getopt } for pid=9534 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 04:26:09 executing program 1: open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) 04:26:09 executing program 3: symlinkat(&(0x7f0000000500)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00') 04:26:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:09 executing program 1: syz_emit_ethernet(0x102, &(0x7f00000027c0)={@random="d9ab05751aca", @broadcast, @val, {@ipv6}}, 0x0) 04:26:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x2000, 0x0, 0x0) 04:26:10 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:10 executing program 1: socketpair(0x2, 0x3, 0xb, &(0x7f0000000000)) 04:26:10 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:10 executing program 1: socketpair(0xa, 0x1, 0x6, &(0x7f0000000000)) 04:26:10 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7f, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4099}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000040)={r0, &(0x7f0000000080), 0x0}, 0x20) 04:26:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000001100)) 04:26:10 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x7f, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 04:26:10 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@fat=@nfs}]}) 04:26:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:10 executing program 3: r0 = gettid() r1 = getpgrp(0x0) rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000680)={0x23, 0x0, 0x6}) 04:26:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x48021, &(0x7f0000000480)) 04:26:10 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) [ 401.737037][ T4821] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:26:10 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:10 executing program 3: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{}]}) 04:26:10 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:10 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000005080)) 04:26:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', 0x0}) [ 401.907797][ T4821] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:26:10 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000003300)) 04:26:10 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) [ 402.021776][ T4821] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 04:26:10 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:10 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="03a4957c42b7131fc2f7d2566c66", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 402.155987][ T4821] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.454039][ T39] audit: type=1400 audit(1656735971.084:360): avc: denied { read } for pid=3354 comm="dhcpcd" name="n72" dev="tmpfs" ino=6962 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 402.470228][ T39] audit: type=1400 audit(1656735971.104:361): avc: denied { open } for pid=3354 comm="dhcpcd" path="/run/udev/data/n72" dev="tmpfs" ino=6962 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 402.486637][ T39] audit: type=1400 audit(1656735971.104:362): avc: denied { getattr } for pid=3354 comm="dhcpcd" path="/run/udev/data/n72" dev="tmpfs" ino=6962 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 402.596321][ T39] audit: type=1400 audit(1656735971.234:363): avc: denied { create } for pid=9611 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 402.614719][ T39] audit: type=1400 audit(1656735971.234:364): avc: denied { write } for pid=9611 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=6975 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 402.633320][ T39] audit: type=1400 audit(1656735971.234:365): avc: denied { append } for pid=9611 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=6975 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 402.666448][ T39] audit: type=1400 audit(1656735971.304:366): avc: denied { unlink } for pid=9614 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=6975 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 403.454377][ T4821] device hsr_slave_0 left promiscuous mode [ 403.461340][ T4821] device hsr_slave_1 left promiscuous mode [ 403.467503][ T4821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.472155][ T4821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.482604][ T4821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.489797][ T4821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.498456][ T4821] device bridge_slave_1 left promiscuous mode [ 403.506841][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.526859][ T4821] device bridge_slave_0 left promiscuous mode [ 403.531325][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.555974][ T4821] device veth1_macvtap left promiscuous mode [ 403.559975][ T4821] device veth0_macvtap left promiscuous mode [ 403.565914][ T4821] device veth1_vlan left promiscuous mode [ 403.570611][ T4821] device veth0_vlan left promiscuous mode [ 403.819627][ T4821] team0 (unregistering): Port device team_slave_1 removed [ 403.834553][ T4821] team0 (unregistering): Port device team_slave_0 removed [ 403.848702][ T4821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.864822][ T4821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.942719][ T4821] bond0 (unregistering): Released all slaves [ 407.013453][ T63] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 409.411520][ T3721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.420361][ T3721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.427815][ T3721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.436496][ T3721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.444997][ T3721] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.450660][ T3721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.470161][ T39] audit: type=1400 audit(1656735978.104:367): avc: denied { mounton } for pid=9685 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 409.583867][ T9685] chnl_net:caif_netlink_parms(): no params data found [ 409.698421][ T9685] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.703247][ T9685] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.708906][ T9685] device bridge_slave_0 entered promiscuous mode [ 409.716289][ T9685] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.722173][ T9685] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.733196][ T9685] device bridge_slave_1 entered promiscuous mode [ 409.801953][ T9685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.812612][ T9685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.866198][ T9685] team0: Port device team_slave_0 added [ 409.872482][ T9685] team0: Port device team_slave_1 added [ 409.918016][ T9685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.922427][ T9685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.940070][ T9685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.948324][ T9685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.952651][ T9685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.972976][ T9685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.035601][ T9685] device hsr_slave_0 entered promiscuous mode [ 410.041267][ T9685] device hsr_slave_1 entered promiscuous mode [ 410.046857][ T9685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.051811][ T9685] Cannot create hsr debugfs directory [ 410.244325][ T9685] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.249977][ T9685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.255756][ T9685] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.259987][ T9685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.316503][ T9685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.330472][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 410.339847][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.351661][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.359020][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 410.389486][ T9685] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.402652][ T6113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 410.410227][ T6113] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.416135][ T6113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.434772][ T6113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.439826][ T6113] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.443843][ T6113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.461161][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 410.467484][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 410.484427][ T6113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 410.490093][ T6113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.501970][ T6113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.511029][ T9685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 410.531423][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 410.537859][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 410.551761][ T9685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.864826][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 410.870959][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 410.882464][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 410.889414][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 410.899455][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 410.906241][ T5497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 410.915238][ T9685] device veth0_vlan entered promiscuous mode [ 410.926774][ T9685] device veth1_vlan entered promiscuous mode [ 410.951957][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 410.957277][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 410.962376][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 410.969163][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.979244][ T9685] device veth0_macvtap entered promiscuous mode [ 410.991491][ T9685] device veth1_macvtap entered promiscuous mode [ 411.010390][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 411.018118][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.024560][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 411.031555][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.037676][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 411.044876][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.055230][ T9685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.060258][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 411.066519][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 411.071803][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 411.078938][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.088931][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 411.096772][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.108736][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 411.116020][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.122667][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 411.130824][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.138172][ T9685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.145650][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 411.152366][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 411.230499][ T3745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.238036][ T3745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.261287][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 411.272663][ T4821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.280270][ T4821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.291597][ T3323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 411.300948][ T39] audit: type=1400 audit(1656735979.934:368): avc: denied { mounton } for pid=9685 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=2379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 04:26:20 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) syz_mount_image$msdos(&(0x7f0000002a80), 0x0, 0x0, 0x1, &(0x7f0000002e80)=[{&(0x7f0000002b00)='9', 0x1}], 0x0, &(0x7f0000002f00)) 04:26:20 executing program 3: socket$unix(0x1, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)="a3") 04:26:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:20 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x6, @random="3f0960e54352"}, 0x0, {0x2, 0x0, @empty}, 'macvlan1\x00'}) 04:26:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000001240)='attr/fscreate\x00') write$tun(r0, 0x0, 0x0) 04:26:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:20 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0xffffff1f, 0x1, 0x18}, './file0\x00'}) 04:26:20 executing program 3: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000002100)='net/ip_tables_matches\x00') write$FUSE_BMAP(r0, 0x0, 0x0) [ 411.459254][ T39] audit: type=1400 audit(1656735980.094:369): avc: denied { read } for pid=9731 comm="syz-executor.1" name="autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 411.461385][ T9732] autofs4:pid:9732:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc0189375) 04:26:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) [ 411.478800][ T39] audit: type=1400 audit(1656735980.094:370): avc: denied { open } for pid=9731 comm="syz-executor.1" path="/dev/autofs" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 411.493549][ T174] Bluetooth: hci1: command 0x0409 tx timeout 04:26:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @mss, @timestamp, @mss], 0x4) [ 411.509608][ T39] audit: type=1400 audit(1656735980.094:371): avc: denied { ioctl } for pid=9731 comm="syz-executor.1" path="/dev/autofs" dev="devtmpfs" ino=103 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 411.515321][ T9732] autofs4:pid:9732:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) 04:26:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:20 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:20 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 04:26:20 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2100000, &(0x7f0000002b00)) 04:26:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:20 executing program 1: syz_emit_ethernet(0x42, &(0x7f00000001c0)={@multicast, @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "1ad697", 0x8, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0x2b, 0x0, 0xff, 0x0, 0x0, 0x8}]}}}}}, 0x0) 04:26:20 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x602000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 04:26:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:20 executing program 1: syz_emit_ethernet(0x42, &(0x7f00000001c0)={@multicast, @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "1ad697", 0x8, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0x2b, 0x0, 0xff, 0x0, 0x0, 0x8}]}}}}}, 0x0) 04:26:20 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', 0x0) 04:26:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:20 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random='wq$\'LR', @broadcast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_addr={0x44, 0x4, 0xce}]}}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 04:26:20 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:20 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) 04:26:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) 04:26:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:20 executing program 3: syz_emit_ethernet(0x9e, &(0x7f0000001040)={@multicast, @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "1208d3", 0x64, 0x3c, 0x0, @private1, @mcast2, {[@dstopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8}, @jumbo, @jumbo]}]}}}}}, 0x0) 04:26:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001e00)={0x14, 0x0, 0x7}, 0x14}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 04:26:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:21 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000000180)={[{@fat=@nfs_nostale_ro}, {@uni_xlate}, {@fat=@sys_immutable}]}) 04:26:21 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 04:26:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:21 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000800)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@map_acorn}, {@mode}, {@dmode}]}) 04:26:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0, 0xc9110000, &(0x7f0000000280)) 04:26:21 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 04:26:21 executing program 1: open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x0) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 04:26:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:21 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:21 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000036c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "7a156c", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1b}}}}}, 0x0) 04:26:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x1d, r0, 0x0) 04:26:21 executing program 3: syz_emit_ethernet(0x52, &(0x7f0000000000)={@multicast, @multicast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "1ad697", 0x18, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@hopopts={0x0, 0x2, '\x00', [@calipso={0x5, 0x8}, @padn={0x1, 0x1, [0x0]}, @enc_lim]}]}}}}}, 0x0) 04:26:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:21 executing program 1: add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 04:26:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x0, 0x0, 0x1, 0x5}, 0x48) 04:26:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x1d, r0, 0xfffffffffffffffc) 04:26:21 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='.\x00', 0x0, 0x9, &(0x7f00000001c0), 0x0, &(0x7f0000000280)={[{@fat=@gid={'gid', 0x3d, 0xee00}}]}) [ 413.196807][ T9828] FAT-fs (loop3): bogus number of reserved sectors 04:26:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) [ 413.202308][ T9828] FAT-fs (loop3): Can't find a valid FAT filesystem 04:26:21 executing program 1: syz_emit_ethernet(0x92, &(0x7f00000038c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "964000", 0x5c, 0x3a, 0x0, @private1, @mcast2, {[], {{}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "76f40f1d97d0e706b7d182f389878c1871d62abcbb347106"}}}}}}}, 0x0) 04:26:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:21 executing program 1: syz_emit_ethernet(0x14e, &(0x7f0000001040)={@multicast, @multicast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "1208d3", 0x114, 0x2f, 0x0, @private1, @mcast2, {[@dstopts={0x0, 0x19, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @jumbo, @jumbo, @generic={0x0, 0x72, "0c759d0b6155c87edd52582ea7114d08bf2787a0fca805046b23a48730007b0be21b57dbc8f1933996ddc4a643910b9f6407e151950765ddd35c930d087b120f9f411296ea7e98f8031583111f16cfe7de6291cd571893800b31faeaa898a65e1623c7434f57aeb978840b17c7cffcd96230"}, @jumbo]}]}}}}}, 0x0) 04:26:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='.\x00', 0x0, 0x9, &(0x7f00000001c0), 0x0, &(0x7f0000000280)={[{@fat=@gid={'gid', 0x3d, 0xee00}}]}) 04:26:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2}}) [ 413.278211][ T9844] FAT-fs (loop3): bogus number of reserved sectors [ 413.282669][ T9844] FAT-fs (loop3): Can't find a valid FAT filesystem [ 413.573424][ T38] Bluetooth: hci1: command 0x041b tx timeout 04:26:22 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:22 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) 04:26:22 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) 04:26:22 executing program 1: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0) 04:26:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000380)="5de9ed2b83dca47bda", 0x9) 04:26:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) [ 413.893272][ T4613] usb 8-1: new high-speed USB device number 16 using dummy_hcd 04:26:22 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) [ 414.143281][ T4613] usb 8-1: Using ep0 maxpacket: 16 [ 414.373203][ T4613] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 414.533289][ T4613] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.539627][ T4613] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.545234][ T4613] usb 8-1: Product: syz [ 414.548028][ T4613] usb 8-1: Manufacturer: syz [ 414.551033][ T4613] usb 8-1: SerialNumber: syz [ 414.605565][ T4613] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 414.811279][ T4613] usb 8-1: USB disconnect, device number 16 04:26:23 executing program 3: syz_clone3(&(0x7f0000002980)={0x20000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002940)=[0x0], 0x1}, 0x58) 04:26:23 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 04:26:23 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:23 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:23 executing program 1: timer_create(0x0, &(0x7f0000001800)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 04:26:23 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:24 executing program 3: syz_clone3(&(0x7f00000028c0)={0x100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002880)=[0xffffffffffffffff], 0x1}, 0x58) syz_clone3(&(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:26:24 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000500)=0x307e, 0x0, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) 04:26:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) [ 415.399560][ T39] audit: type=1400 audit(1656735984.034:372): avc: denied { connect } for pid=9934 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 04:26:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@ipmr_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) 04:26:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) [ 415.438315][ T39] audit: type=1400 audit(1656735984.064:373): avc: denied { name_connect } for pid=9934 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 415.643417][ T3323] Bluetooth: hci1: command 0x040f tx timeout 04:26:24 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@ipv6_delrule={0x24, 0x12, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8}]}, 0x24}}, 0x0) 04:26:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) [ 415.672807][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 04:26:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:24 executing program 1: syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000500)=0x307e, 0x0, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) 04:26:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:24 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000048c0), 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000004ac0)={[{0x0, 'rlimit'}]}, 0x8) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000048c0), 0x1, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000004ac0)={[{0x0, 'rlimit'}]}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000100)=[@enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/25, 0x19, 0x2, 0x14}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x11e, 0x2}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x2}], 0x33, 0x0, &(0x7f0000000180)="2dceafa15d3548da67f7ffde8390953eb1b0bc46b56fcc0447eb88b3c50f6bd17575c78f57702277c0a6899a2883e5d4b0e1ee"}) 04:26:24 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:25 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000048c0), 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000004ac0)={[{0x0, 'rlimit'}]}, 0x8) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000048c0), 0x1, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000004ac0)={[{0x0, 'rlimit'}]}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000100)=[@enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/25, 0x19, 0x2, 0x14}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x11e, 0x2}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x2}], 0x33, 0x0, &(0x7f0000000180)="2dceafa15d3548da67f7ffde8390953eb1b0bc46b56fcc0447eb88b3c50f6bd17575c78f57702277c0a6899a2883e5d4b0e1ee"}) 04:26:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:25 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000048c0), 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000004ac0)={[{0x0, 'rlimit'}]}, 0x8) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000048c0), 0x1, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000004ac0)={[{0x0, 'rlimit'}]}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000100)=[@enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/25, 0x19, 0x2, 0x14}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x11e, 0x2}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x2}], 0x33, 0x0, &(0x7f0000000180)="2dceafa15d3548da67f7ffde8390953eb1b0bc46b56fcc0447eb88b3c50f6bd17575c78f57702277c0a6899a2883e5d4b0e1ee"}) 04:26:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x5}]}, 0x24}}, 0x0) 04:26:25 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 417.079148][ T9997] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 04:26:25 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x1261, 0x0) 04:26:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x301, 0x0) 04:26:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@ipv6_delrule={0x1c, 0x16, 0x1}, 0x1c}}, 0x0) 04:26:25 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000048c0), 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000004ac0)={[{0x0, 'rlimit'}]}, 0x8) r2 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000048c0), 0x1, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000004ac0)={[{0x0, 'rlimit'}]}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000100)=[@enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/25, 0x19, 0x2, 0x14}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x11e, 0x2}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x2}], 0x33, 0x0, &(0x7f0000000180)="2dceafa15d3548da67f7ffde8390953eb1b0bc46b56fcc0447eb88b3c50f6bd17575c78f57702277c0a6899a2883e5d4b0e1ee"}) 04:26:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) [ 417.160071][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:26:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) 04:26:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0) 04:26:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x1269, 0x0) 04:26:26 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:26 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) 04:26:26 executing program 3: capget(&(0x7f0000000440)={0x20071026}, &(0x7f0000000480)) 04:26:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, 0x0, 0x0) [ 417.466833][T10027] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure 04:26:26 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x78}}}}}]}}]}}, 0x0) 04:26:26 executing program 3: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) 04:26:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, 0x0, 0x0) 04:26:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, 0x0, &(0x7f00000000c0)) [ 417.733332][ T38] Bluetooth: hci1: command 0x0419 tx timeout [ 417.783393][ T3749] usb 6-1: new high-speed USB device number 16 using dummy_hcd 04:26:26 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, 0x0, 0x0) 04:26:26 executing program 3: keyctl$search(0xa, 0x0, &(0x7f0000000340)='rxrpc_s\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0) 04:26:26 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006040)={&(0x7f0000000140)={0x10, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) [ 418.183349][ T3749] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 418.403384][ T3749] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.409994][ T3749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.415902][ T3749] usb 6-1: Product: syz [ 418.418840][ T3749] usb 6-1: Manufacturer: syz [ 418.422738][ T3749] usb 6-1: SerialNumber: syz [ 418.444827][T10032] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 418.474600][ T3749] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 418.682550][ T3323] usb 6-1: USB disconnect, device number 16 04:26:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0x8, 0x7f}, 0x48) 04:26:27 executing program 3: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x2, &(0x7f00000024c0)=[{&(0x7f00000013c0)='C', 0x1}, {&(0x7f00000014c0)='\\', 0x1}], 0x0, &(0x7f0000002540)) 04:26:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x1e4, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x134, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_USERDATA={0xd5, 0xc, "98f605ffcd24ea72f971db35e06805e847a1cf5108c0e19324dd7fb597290f84a4250e4f8c2f732cd29e041811c8d098debb883fe7c3529ba7732ab369e9a6156746438485a101fbbc72ecb2e168f93005e1f6342f3afb9448633c662975c97cb30413b5e917674319faad554dc26563ef02cba17cb800af8205d7fc9a0bfd679b6a7a16509df82b76bd54a646bf7e756ad5963bbae7be8a7d510b5138e6d78cf5ae8a60c5e62f165d8da6839c88fc3a5f0a77eed4d818573f00b83d8b83170c3ec6896661e9d9c8ea4a225b33db5781ac"}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELSET={0x88, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_KEY={0x8}]}}}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_GC_INTERVAL={0x8}]}, @NFT_MSG_DELRULE={0x118, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_USERDATA={0x89, 0x7, 0x1, 0x0, "1b1368d192d4fb3e2eec98b590cd240fdb1910155fbc5b9fa07bdc046c218130e2373e861e0d18fa37a01aaee2c5e4d6bb02f86ca1589257d9775d51df14ffd3b2cbdc2a0f22aa44d0639c8476aea3de62a8b7aedd6303cf8a3751f79a198531dffd5cef85af7df75c0ad536fafd06c3c7534a589bb265ebca3811967a47c5dbd346c41ed2"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14}, @NFT_MSG_NEWSETELEM={0x938, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x918, 0x3, 0x0, 0x1, [{0x360, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "0ef8f38e97d35721a286df6e99e0571025f095cd3f335a30cfae91990dc970014b74e51a63e5bbbca1410aec1e0eb270fc93613453f672c30e2bf5e34c4ead2538b17cb0369cbc0afec95671d3655000726109e0eaa91ed3322b8b41a842aadfb8cb50442fc8287991a9fe518d4981e5f6fc5d444cc66a83c7add44827b1a81021d26ee5345dc2cd675c243decbf2c9a363dac80547cdd8be661846de7e2018da1ad6e7528df493acbbad4155fb5ec63dcf2ef281505d6ff0ee6e1ccaf6556bd9059b579551d5e6cb73b64736a353d1bfddbf6a26c237f0713"}, @NFTA_DATA_VALUE={0x6d, 0x1, "877b6d8066bccab8cab4fafbe933764746708473f4c663061bdc64ef0f4c24976469fe87bd6df2dff8b4eb81596de1e71edf5c8f130e82fa00052f961d77435be0af28e6c4da4cdf61aeabee899279edf9a87eba515de2c27f68955445b9c0185cc6cb72cbcd3d379e"}]}, @NFTA_SET_ELEM_KEY={0x1a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x95, 0x1, "ec4cb77f6ce2ae43a02f3b7537a1e85b4133714e4e4ea3c62747a755c0a789f43b9a929879b7c9941f088ba7f0f395df22873dd73e9146202862b53f398484a215e7b40a741b2e544eebc7820061c21b053344e26153105d1610011855c997326b9eb732a08f65d176387c7529b5fdb10111e3548c5e1a31ade82c36d8d9fe99743168116f68cc4257efcd25cd2522497f"}, @NFTA_DATA_VALUE={0x9, 0x1, "653667a3d3"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}, {0x480, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x320, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x65, 0x1, "7aa676c65cc7965a06deb5a2009207e4d519fbc85528f97e0aab02e58e6e98f165ba5a238f18736472040749b4a3536d1af07f51cdf9554e9478b7c426952869e8cb0413c0fd26076206f2d83695e799ba0479355ab43fd39d19fbf3cdfe242355"}, @NFTA_DATA_VALUE={0xe1, 0x1, "88661a8d45e02ab99d0df0c6438aecf443c46a3d5a25175fafb8d467ea3e6e6034e16ebf685320118eb23302db7cc5f0a8ce71430984429c4961134bbcb8d69c6ed8e8a163ebd54e06c5f3b613cde92d75ee75b0e030bd20b24b2108f6515e95810f2d32f51423dbcc6583df367256c5b1b3bc014716b1616d9a49618d2b92ffa53400fba69e0e6608661dd2b543d33c4881cfa5989433d28de8d419ab4174eb9ce8f3a5c9078a642595aba90b3e28e96b63f4c6a418e8d07b08849a7f87c988e3dc213a6104974eef16bb6c07e3a4d17fa4b1ef76ea7b2c6bb464b1b9"}, @NFTA_DATA_VALUE={0x95, 0x1, "4b634e8b324a3fc2ba7f96d52205f83e6cfd8b6da31067631eead576cdbb06afcc75b669747dfc8e3a09f6376cc400505945a1e3d17c7e6456baf041d2ade469e8163ff69ffaca7ac160ea5109699a1f86a1a42307422e77fa1ee40269262822bb55948aabb985eebfdc4da8aff93267b38a5c8160169eaa53252c3e4567b3a96083e6e10bb465765057a9e6ca33257156"}, @NFTA_DATA_VALUE={0x21, 0x1, "43776f37ad6243534a3be057245a7340b8c10516a38dd7d3742dd9608e"}, @NFTA_DATA_VALUE={0xb1, 0x1, "daf0a52c8685e9074927a70c5e143f779fa1929103eb94a5d259cfb1814c157e2504b6b75efc8ede420318b3c8636869d6f71858d3761e493a8e2702b2e50477c18806e9c4f3c1ec9dab9bb1894dfd63d4d8543195aeddf502f8a607591586748bc5058b4551d2a4696b658f5c9cf48078b2497448beda71c3980d14019f7cfa3eb578a3a4c6609163224a77baa44f68f997d4799251ff0afab3bbc7a0c9c2f144e1a03006205ba89d3c9ce2b6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0xb9, 0x6, 0x1, 0x0, "37a62ff88e5e74ef8c2f3bbe4a7cdf2582a74f7f062fbcf7268bd1d5e9a6373529511df96af4964ea4d197a6b5dfb7f929b28f410747fec83a264ccc68c0692928a3914445c8099d6ad19db766397e85660c446bd5ef2d864766219b1c9780aac1b757dc2574e9e55779a25bbcf9d472a0ac03e52f4280ea6952691e7316ccdb2904ebec59e580d0a1b3134d0c97adf12c309ff0b9d31e21ac2e2b631ed13215f515db29e078bf2538a0291fdce0dd31543a767547"}, @NFTA_SET_ELEM_USERDATA={0x95, 0x6, 0x1, 0x0, "8dfeb8049fbacd8b4489b9030cc09cfd481fd76963b007a2d6d179c38d97593251f9e6f08bb0e386893c9f8decaaf000b6d2997fed6003cf0295f5efa9211a368b10e5ac6ec9baed69812c47c8082e2262d572bd94eed5dc0623e9bf97ee48a6fd403c2051a2a5336e025fda343259d08743e98ec86d5014db6082ca43ee20a529aced48f506b03ef5600b8e7187adc0e4"}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x75, 0x6, 0x1, 0x0, "3e45cb91c7c86fc1192a46b2dea00776ec93a720069ecad168c3b5f065eb8987e90ba547519fa6cb705d853245c1a5ee1f09c81a02f50edf41b7b450c14f56c7ba0be6c42ae0e780543252d5be4be0a9b317f056e0bdcfc191c66576dedc93fe8dd2becebad5df2afb41cf8acdac2aa9fc"}, @NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "c10cbd3c0377557f776e0cb7e47e6550839c1586f266315ebac3b41b3068465432ef83d373077efbef0bb18554478e2ac5c14677951faf4276de284c828f249777eb67de1f6f0fe7da7bd0aae8bb408e3a91c95f27"}, @NFTA_DATA_VALUE={0x55, 0x1, "49e8ea0e24178521b3f5f28c6f3db78831ae1edd9f30ea1d43d5552948a6a3bce4ff6ec94413075866fe5fd7791c6acc61eab1bd4bf8c6affc904771ed4a17109930766ed5c69348c27d4e583bc81bef62"}]}]}]}]}], {0x14}}, 0xe84}}, 0x0) 04:26:27 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0x8, 0x7f}, 0x48) 04:26:27 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x0, 0x0) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000002cc0)=0x941e, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 04:26:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0x0, 0x16, 0x8, 0x7f}, 0x48) 04:26:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x1e4, 0x18, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x134, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_USERDATA={0xd5, 0xc, "98f605ffcd24ea72f971db35e06805e847a1cf5108c0e19324dd7fb597290f84a4250e4f8c2f732cd29e041811c8d098debb883fe7c3529ba7732ab369e9a6156746438485a101fbbc72ecb2e168f93005e1f6342f3afb9448633c662975c97cb30413b5e917674319faad554dc26563ef02cba17cb800af8205d7fc9a0bfd679b6a7a16509df82b76bd54a646bf7e756ad5963bbae7be8a7d510b5138e6d78cf5ae8a60c5e62f165d8da6839c88fc3a5f0a77eed4d818573f00b83d8b83170c3ec6896661e9d9c8ea4a225b33db5781ac"}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELSET={0x88, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_KEY={0x8}]}}}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_GC_INTERVAL={0x8}]}, @NFT_MSG_DELRULE={0x118, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_USERDATA={0x89, 0x7, 0x1, 0x0, "1b1368d192d4fb3e2eec98b590cd240fdb1910155fbc5b9fa07bdc046c218130e2373e861e0d18fa37a01aaee2c5e4d6bb02f86ca1589257d9775d51df14ffd3b2cbdc2a0f22aa44d0639c8476aea3de62a8b7aedd6303cf8a3751f79a198531dffd5cef85af7df75c0ad536fafd06c3c7534a589bb265ebca3811967a47c5dbd346c41ed2"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14}, @NFT_MSG_NEWSETELEM={0x938, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x918, 0x3, 0x0, 0x1, [{0x360, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "0ef8f38e97d35721a286df6e99e0571025f095cd3f335a30cfae91990dc970014b74e51a63e5bbbca1410aec1e0eb270fc93613453f672c30e2bf5e34c4ead2538b17cb0369cbc0afec95671d3655000726109e0eaa91ed3322b8b41a842aadfb8cb50442fc8287991a9fe518d4981e5f6fc5d444cc66a83c7add44827b1a81021d26ee5345dc2cd675c243decbf2c9a363dac80547cdd8be661846de7e2018da1ad6e7528df493acbbad4155fb5ec63dcf2ef281505d6ff0ee6e1ccaf6556bd9059b579551d5e6cb73b64736a353d1bfddbf6a26c237f0713"}, @NFTA_DATA_VALUE={0x6d, 0x1, "877b6d8066bccab8cab4fafbe933764746708473f4c663061bdc64ef0f4c24976469fe87bd6df2dff8b4eb81596de1e71edf5c8f130e82fa00052f961d77435be0af28e6c4da4cdf61aeabee899279edf9a87eba515de2c27f68955445b9c0185cc6cb72cbcd3d379e"}]}, @NFTA_SET_ELEM_KEY={0x1a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x95, 0x1, "ec4cb77f6ce2ae43a02f3b7537a1e85b4133714e4e4ea3c62747a755c0a789f43b9a929879b7c9941f088ba7f0f395df22873dd73e9146202862b53f398484a215e7b40a741b2e544eebc7820061c21b053344e26153105d1610011855c997326b9eb732a08f65d176387c7529b5fdb10111e3548c5e1a31ade82c36d8d9fe99743168116f68cc4257efcd25cd2522497f"}, @NFTA_DATA_VALUE={0x9, 0x1, "653667a3d3"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}, {0x480, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x320, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x65, 0x1, "7aa676c65cc7965a06deb5a2009207e4d519fbc85528f97e0aab02e58e6e98f165ba5a238f18736472040749b4a3536d1af07f51cdf9554e9478b7c426952869e8cb0413c0fd26076206f2d83695e799ba0479355ab43fd39d19fbf3cdfe242355"}, @NFTA_DATA_VALUE={0xe1, 0x1, "88661a8d45e02ab99d0df0c6438aecf443c46a3d5a25175fafb8d467ea3e6e6034e16ebf685320118eb23302db7cc5f0a8ce71430984429c4961134bbcb8d69c6ed8e8a163ebd54e06c5f3b613cde92d75ee75b0e030bd20b24b2108f6515e95810f2d32f51423dbcc6583df367256c5b1b3bc014716b1616d9a49618d2b92ffa53400fba69e0e6608661dd2b543d33c4881cfa5989433d28de8d419ab4174eb9ce8f3a5c9078a642595aba90b3e28e96b63f4c6a418e8d07b08849a7f87c988e3dc213a6104974eef16bb6c07e3a4d17fa4b1ef76ea7b2c6bb464b1b9"}, @NFTA_DATA_VALUE={0x95, 0x1, "4b634e8b324a3fc2ba7f96d52205f83e6cfd8b6da31067631eead576cdbb06afcc75b669747dfc8e3a09f6376cc400505945a1e3d17c7e6456baf041d2ade469e8163ff69ffaca7ac160ea5109699a1f86a1a42307422e77fa1ee40269262822bb55948aabb985eebfdc4da8aff93267b38a5c8160169eaa53252c3e4567b3a96083e6e10bb465765057a9e6ca33257156"}, @NFTA_DATA_VALUE={0x21, 0x1, "43776f37ad6243534a3be057245a7340b8c10516a38dd7d3742dd9608e"}, @NFTA_DATA_VALUE={0xb1, 0x1, "daf0a52c8685e9074927a70c5e143f779fa1929103eb94a5d259cfb1814c157e2504b6b75efc8ede420318b3c8636869d6f71858d3761e493a8e2702b2e50477c18806e9c4f3c1ec9dab9bb1894dfd63d4d8543195aeddf502f8a607591586748bc5058b4551d2a4696b658f5c9cf48078b2497448beda71c3980d14019f7cfa3eb578a3a4c6609163224a77baa44f68f997d4799251ff0afab3bbc7a0c9c2f144e1a03006205ba89d3c9ce2b6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0xb9, 0x6, 0x1, 0x0, "37a62ff88e5e74ef8c2f3bbe4a7cdf2582a74f7f062fbcf7268bd1d5e9a6373529511df96af4964ea4d197a6b5dfb7f929b28f410747fec83a264ccc68c0692928a3914445c8099d6ad19db766397e85660c446bd5ef2d864766219b1c9780aac1b757dc2574e9e55779a25bbcf9d472a0ac03e52f4280ea6952691e7316ccdb2904ebec59e580d0a1b3134d0c97adf12c309ff0b9d31e21ac2e2b631ed13215f515db29e078bf2538a0291fdce0dd31543a767547"}, @NFTA_SET_ELEM_USERDATA={0x95, 0x6, 0x1, 0x0, "8dfeb8049fbacd8b4489b9030cc09cfd481fd76963b007a2d6d179c38d97593251f9e6f08bb0e386893c9f8decaaf000b6d2997fed6003cf0295f5efa9211a368b10e5ac6ec9baed69812c47c8082e2262d572bd94eed5dc0623e9bf97ee48a6fd403c2051a2a5336e025fda343259d08743e98ec86d5014db6082ca43ee20a529aced48f506b03ef5600b8e7187adc0e4"}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x75, 0x6, 0x1, 0x0, "3e45cb91c7c86fc1192a46b2dea00776ec93a720069ecad168c3b5f065eb8987e90ba547519fa6cb705d853245c1a5ee1f09c81a02f50edf41b7b450c14f56c7ba0be6c42ae0e780543252d5be4be0a9b317f056e0bdcfc191c66576dedc93fe8dd2becebad5df2afb41cf8acdac2aa9fc"}, @NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "c10cbd3c0377557f776e0cb7e47e6550839c1586f266315ebac3b41b3068465432ef83d373077efbef0bb18554478e2ac5c14677951faf4276de284c828f249777eb67de1f6f0fe7da7bd0aae8bb408e3a91c95f27"}, @NFTA_DATA_VALUE={0x55, 0x1, "49e8ea0e24178521b3f5f28c6f3db78831ae1edd9f30ea1d43d5552948a6a3bce4ff6ec94413075866fe5fd7791c6acc61eab1bd4bf8c6affc904771ed4a17109930766ed5c69348c27d4e583bc81bef62"}]}]}]}]}], {0x14}}, 0xe84}}, 0x0) 04:26:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) 04:26:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x8, 0x7f}, 0x48) 04:26:27 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x8, 0x7f}, 0x48) 04:26:28 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:28 executing program 1: sysinfo(&(0x7f0000000000)=""/87) 04:26:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0)) 04:26:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0x8, 0x7f}, 0x48) 04:26:28 executing program 1: sysinfo(&(0x7f0000000000)=""/87) 04:26:28 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:28 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x77, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x0, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x81}, {0x6, 0x24, 0x1a, 0x1000}, [@acm={0x4}, @call_mgmt={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x45}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7f, 0x0, 0x1}}}}}}}]}}, 0x0) 04:26:28 executing program 1: sysinfo(&(0x7f0000000000)=""/87) 04:26:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x0, 0x7f}, 0x48) 04:26:28 executing program 1: sysinfo(&(0x7f0000000000)=""/87) 04:26:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x0, 0x7f}, 0x48) 04:26:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}}, 0x0) 04:26:28 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x0, 0x7f}, 0x48) 04:26:29 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 420.416179][ T3323] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 420.673233][ T3323] usb 8-1: Using ep0 maxpacket: 32 [ 420.823791][ T3323] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.837628][ T3323] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 420.846325][ T3323] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 420.856110][ T3323] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 420.861806][ T3323] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 421.033480][ T3323] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.041797][ T3323] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.049488][ T3323] usb 8-1: Product: syz [ 421.053389][ T3323] usb 8-1: Manufacturer: syz [ 421.057459][ T3323] usb 8-1: SerialNumber: syz [ 421.353408][ T3323] cdc_ncm 8-1:1.0: bind() failure [ 421.360427][ T3323] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 421.366515][ T3323] cdc_ncm 8-1:1.1: bind() failure [ 421.373972][ T3323] usb 8-1: USB disconnect, device number 17 04:26:30 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) 04:26:30 executing program 1: syz_emit_ethernet(0x16c, &(0x7f0000000840)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100270086dd682f04d7013206"], 0x0) 04:26:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8}, 0x48) 04:26:30 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8}, 0x48) 04:26:30 executing program 1: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "81d543"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 'r'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 04:26:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8}, 0x48) 04:26:30 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 422.113262][ T15] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 422.133258][ T5499] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 422.353192][ T15] usb 8-1: Using ep0 maxpacket: 8 [ 422.473445][ T15] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 422.564273][ T5499] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 422.569515][ T5499] usb 6-1: config 1 has no interface number 1 [ 422.574903][ T5499] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 422.585013][ T5499] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.592115][ T5499] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.643736][ T15] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 422.649886][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.655080][ T15] usb 8-1: Product: syz [ 422.657380][ T15] usb 8-1: Manufacturer: syz [ 422.660157][ T15] usb 8-1: SerialNumber: syz [ 422.706859][ T15] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 422.753413][ T5499] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.759356][ T5499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.766174][ T5499] usb 6-1: Product: syz [ 422.769406][ T5499] usb 6-1: Manufacturer: syz [ 422.773225][ T5499] usb 6-1: SerialNumber: syz [ 422.911887][ T3753] usb 8-1: USB disconnect, device number 18 [ 423.162174][ T5499] usb 6-1: USB disconnect, device number 17 [ 423.194376][ T7833] udevd[7833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 04:26:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x401870cc) 04:26:32 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00') 04:26:32 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:32 executing program 2: getpid() socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) 04:26:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xec00, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:26:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100, 0xa002) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, "ad6623b4a269840e33c8c502bc4656878638858393bce4db809b2bf7a76f7283cfa054696b134eaf6eb5a3490749b7cf6b4d29ec00dd6f427fe6885b4022939e", "8f990a9798beea5b2f4b2b31ecd79547bee40eb2574b6d5a6079ff62365fab2c7f017aad9ae52afbb771ac1f0fa07f337e5329d9a79916c01390008c9f929bd6", "8af9c9f91cb4b233c451d1566b53c4f7344410df2de875193f917fa9c20b6fc7"}) 04:26:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x3f, 0x0, 0x0, 0x0, 0x10, "ad6623b4a269840e33c8c502bc4656878638858393bce4db809b2bf7a76f7283cfa054696b134eaf6eb5a3490749b7cf6b4d29ec00dd6f427fe6885b4022939e", "8f990a9798beea5b2f4b2b31ecd79547bee40eb2574b6d5a6079ff62365fab2c7f017aad9ae52afbb771ac1f0fa07f337e5329d9a79916c01390008c9f929bd6", "8af9c9f91cb4b233c451d1566b53c4f7344410df2de875193f917fa9c20b6fc7", [0x9, 0x7]}) 04:26:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x3f, 0x0, 0x0, 0x12, 0x0, "ad6623b4a269840e33c8c502bc4656878638858393bce4db809b2bf7a76f7283cfa054696b134eaf6eb5a3490749b7cf6b4d29ec00dd6f427fe6885b4022939e", "8f990a9798beea5b2f4b2b31ecd79547bee40eb2574b6d5a6079ff62365fab2c7f017aad9ae52afbb771ac1f0fa07f337e5329d9a79916c01390008c9f929bd6", "8af9c9f91cb4b233c451d1566b53c4f7344410df2de875193f917fa9c20b6fc7", [0x0, 0x7]}) 04:26:32 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x2, [@generic={0x3}, @ext_cap={0x7}]}}) 04:26:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f00000038c0)={0x10, 0x1d, 0x1}, 0x10}], 0x1}, 0x0) [ 423.597844][ T39] audit: type=1400 audit(1656735992.234:374): avc: denied { create } for pid=10152 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 423.612518][ T39] audit: type=1400 audit(1656735992.234:375): avc: denied { write } for pid=10152 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 423.628453][ T39] audit: type=1400 audit(1656735992.234:376): avc: denied { nlmsg_write } for pid=10152 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 04:26:32 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:32 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20}, 0x20}}, 0x0) 04:26:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, "ad6623b4a269840e33c8c502bc4656878638858393bce4db809b2bf7a76f7283cfa054696b134eaf6eb5a3490749b7cf6b4d29ec00dd6f427fe6885b4022939e", "8f990a9798beea5b2f4b2b31ecd79547bee40eb2574b6d5a6079ff62365fab2c7f017aad9ae52afbb771ac1f0fa07f337e5329d9a79916c01390008c9f929bd6", "8af9c9f91cb4b233c451d1566b53c4f7344410df2de875193f917fa9c20b6fc7"}) 04:26:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x21, 0x0, &(0x7f00000000c0)) [ 423.732003][ T39] audit: type=1400 audit(1656735992.364:377): avc: denied { nlmsg_write } for pid=10155 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 04:26:32 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000001300), 0x10000, 0x0) 04:26:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x1e4, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x49}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x134, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7b}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0xec, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_USERDATA={0xd6, 0xc, "98f605ffcd24ea72f971db35e06805e847a1cf5108c0e19324dd7fb597290f84a4250e4f8c2f732cd29e041811c8d098debb883fe7c3529ba7732ab369e9a6156746438485a101fbbc72ecb2e168f93005e1f6342f3afb9448633c662975c97cb30413b5e917674319faad554dc26563ef02cba17cb800af8205d7fc9a0bfd679b6a7a16509df82b76bd54a646bf7e756ad5963bbae7be8a7d510b5138e6d78cf5ae8a60c5e62f165d8da6839c88fc3a5f0a77eed4d818573f00b83d8b83170c3ec6896661e9d9c8ea4a225b33db5781ac71"}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x88, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_KEY={0x8}]}}}, @NFTA_SET_HANDLE={0xc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_ID={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELRULE={0x118, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_USERDATA={0x89, 0x7, 0x1, 0x0, "1b1368d192d4fb3e2eec98b590cd240fdb1910155fbc5b9fa07bdc046c218130e2373e861e0d18fa37a01aaee2c5e4d6bb02f86ca1589257d9775d51df14ffd3b2cbdc2a0f22aa44d0639c8476aea3de62a8b7aedd6303cf8a3751f79a198531dffd5cef85af7df75c0ad536fafd06c3c7534a589bb265ebca3811967a47c5dbd346c41ed2"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14}, @NFT_MSG_NEWSETELEM={0x938, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x918, 0x3, 0x0, 0x1, [{0x360, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "0ef8f38e97d35721a286df6e99e0571025f095cd3f335a30cfae91990dc970014b74e51a63e5bbbca1410aec1e0eb270fc93613453f672c30e2bf5e34c4ead2538b17cb0369cbc0afec95671d3655000726109e0eaa91ed3322b8b41a842aadfb8cb50442fc8287991a9fe518d4981e5f6fc5d444cc66a83c7add44827b1a81021d26ee5345dc2cd675c243decbf2c9a363dac80547cdd8be661846de7e2018da1ad6e7528df493acbbad4155fb5ec63dcf2ef281505d6ff0ee6e1ccaf6556bd9059b579551d5e6cb73b64736a353d1bfddbf6a26c237f0713"}, @NFTA_DATA_VALUE={0x6d, 0x1, "877b6d8066bccab8cab4fafbe933764746708473f4c663061bdc64ef0f4c24976469fe87bd6df2dff8b4eb81596de1e71edf5c8f130e82fa00052f961d77435be0af28e6c4da4cdf61aeabee899279edf9a87eba515de2c27f68955445b9c0185cc6cb72cbcd3d379e"}]}, @NFTA_SET_ELEM_KEY={0x1a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x95, 0x1, "ec4cb77f6ce2ae43a02f3b7537a1e85b4133714e4e4ea3c62747a755c0a789f43b9a929879b7c9941f088ba7f0f395df22873dd73e9146202862b53f398484a215e7b40a741b2e544eebc7820061c21b053344e26153105d1610011855c997326b9eb732a08f65d176387c7529b5fdb10111e3548c5e1a31ade82c36d8d9fe99743168116f68cc4257efcd25cd2522497f"}, @NFTA_DATA_VALUE={0x9, 0x1, "653667a3d3"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}, {0x480, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x320, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x65, 0x1, "7aa676c65cc7965a06deb5a2009207e4d519fbc85528f97e0aab02e58e6e98f165ba5a238f18736472040749b4a3536d1af07f51cdf9554e9478b7c426952869e8cb0413c0fd26076206f2d83695e799ba0479355ab43fd39d19fbf3cdfe242355"}, @NFTA_DATA_VALUE={0xe1, 0x1, "88661a8d45e02ab99d0df0c6438aecf443c46a3d5a25175fafb8d467ea3e6e6034e16ebf685320118eb23302db7cc5f0a8ce71430984429c4961134bbcb8d69c6ed8e8a163ebd54e06c5f3b613cde92d75ee75b0e030bd20b24b2108f6515e95810f2d32f51423dbcc6583df367256c5b1b3bc014716b1616d9a49618d2b92ffa53400fba69e0e6608661dd2b543d33c4881cfa5989433d28de8d419ab4174eb9ce8f3a5c9078a642595aba90b3e28e96b63f4c6a418e8d07b08849a7f87c988e3dc213a6104974eef16bb6c07e3a4d17fa4b1ef76ea7b2c6bb464b1b9"}, @NFTA_DATA_VALUE={0x95, 0x1, "4b634e8b324a3fc2ba7f96d52205f83e6cfd8b6da31067631eead576cdbb06afcc75b669747dfc8e3a09f6376cc400505945a1e3d17c7e6456baf041d2ade469e8163ff69ffaca7ac160ea5109699a1f86a1a42307422e77fa1ee40269262822bb55948aabb985eebfdc4da8aff93267b38a5c8160169eaa53252c3e4567b3a96083e6e10bb465765057a9e6ca33257156"}, @NFTA_DATA_VALUE={0x21, 0x1, "43776f37ad6243534a3be057245a7340b8c10516a38dd7d3742dd9608e"}, @NFTA_DATA_VALUE={0xb1, 0x1, "daf0a52c8685e9074927a70c5e143f779fa1929103eb94a5d259cfb1814c157e2504b6b75efc8ede420318b3c8636869d6f71858d3761e493a8e2702b2e50477c18806e9c4f3c1ec9dab9bb1894dfd63d4d8543195aeddf502f8a607591586748bc5058b4551d2a4696b658f5c9cf48078b2497448beda71c3980d14019f7cfa3eb578a3a4c6609163224a77baa44f68f997d4799251ff0afab3bbc7a0c9c2f144e1a03006205ba89d3c9ce2b6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0xb9, 0x6, 0x1, 0x0, "37a62ff88e5e74ef8c2f3bbe4a7cdf2582a74f7f062fbcf7268bd1d5e9a6373529511df96af4964ea4d197a6b5dfb7f929b28f410747fec83a264ccc68c0692928a3914445c8099d6ad19db766397e85660c446bd5ef2d864766219b1c9780aac1b757dc2574e9e55779a25bbcf9d472a0ac03e52f4280ea6952691e7316ccdb2904ebec59e580d0a1b3134d0c97adf12c309ff0b9d31e21ac2e2b631ed13215f515db29e078bf2538a0291fdce0dd31543a767547"}, @NFTA_SET_ELEM_USERDATA={0x95, 0x6, 0x1, 0x0, "8dfeb8049fbacd8b4489b9030cc09cfd481fd76963b007a2d6d179c38d97593251f9e6f08bb0e386893c9f8decaaf000b6d2997fed6003cf0295f5efa9211a368b10e5ac6ec9baed69812c47c8082e2262d572bd94eed5dc0623e9bf97ee48a6fd403c2051a2a5336e025fda343259d08743e98ec86d5014db6082ca43ee20a529aced48f506b03ef5600b8e7187adc0e4"}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x75, 0x6, 0x1, 0x0, "3e45cb91c7c86fc1192a46b2dea00776ec93a720069ecad168c3b5f065eb8987e90ba547519fa6cb705d853245c1a5ee1f09c81a02f50edf41b7b450c14f56c7ba0be6c42ae0e780543252d5be4be0a9b317f056e0bdcfc191c66576dedc93fe8dd2becebad5df2afb41cf8acdac2aa9fc"}, @NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "c10cbd3c0377557f776e0cb7e47e6550839c1586f266315ebac3b41b3068465432ef83d373077efbef0bb18554478e2ac5c14677951faf4276de284c828f249777eb67de1f6f0fe7da7bd0aae8bb408e3a91c95f27"}, @NFTA_DATA_VALUE={0x55, 0x1, "49e8ea0e24178521b3f5f28c6f3db78831ae1edd9f30ea1d43d5552948a6a3bce4ff6ec94413075866fe5fd7791c6acc61eab1bd4bf8c6affc904771ed4a17109930766ed5c69348c27d4e583bc81bef62"}]}]}]}]}], {0x14}}, 0xe84}, 0x1, 0x0, 0x0, 0x800}, 0x4) [ 423.873304][ T15] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 424.135879][ T15] usb 7-1: Using ep0 maxpacket: 8 [ 424.343372][ T15] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 424.527661][ T15] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.535914][ T15] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.541865][ T15] usb 7-1: Product: syz [ 424.545209][ T15] usb 7-1: Manufacturer: syz [ 424.548729][ T15] usb 7-1: SerialNumber: syz [ 424.616298][ T15] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 424.821673][ T5496] usb 7-1: USB disconnect, device number 21 04:26:33 executing program 2: syz_emit_ethernet(0x92, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "41008c", 0x5c, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@local]}]}}}}}, 0x0) 04:26:33 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f00000005c0), 0x10) 04:26:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 04:26:33 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 425.342379][ T39] audit: type=1400 audit(1656735993.974:378): avc: denied { bind } for pid=10169 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 04:26:33 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0xc, &(0x7f0000000640)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 04:26:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x9, 0x0, &(0x7f00000000c0)) 04:26:34 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 04:26:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c0a) 04:26:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0xb7b6c5e2f9e54b3e, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private}}}}) 04:26:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x10}}, [], {0x14}}, 0x28}}, 0x0) 04:26:34 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:34 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) [ 425.643506][ T15] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 425.653653][ T3749] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 425.903300][ T3749] usb 6-1: Using ep0 maxpacket: 32 [ 426.033356][ T3749] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.042782][ T3749] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.051284][ T3749] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 426.059354][ T3749] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 426.066823][ T3749] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 426.074328][ T3749] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 426.143714][ T15] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 426.150428][ T15] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 426.158949][ T15] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.253567][ T3749] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.259423][ T3749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.266244][ T3749] usb 6-1: Product: syz [ 426.269107][ T3749] usb 6-1: Manufacturer: syz [ 426.272529][ T3749] usb 6-1: SerialNumber: syz [ 426.363323][ T15] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.370407][ T15] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.375179][ T15] usb 8-1: Product: syz [ 426.377873][ T15] usb 8-1: Manufacturer: syz [ 426.381530][ T15] usb 8-1: SerialNumber: syz [ 426.553377][ T3749] cdc_ncm 6-1:1.0: bind() failure [ 426.560905][ T3749] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 426.565908][ T3749] cdc_ncm 6-1:1.1: bind() failure [ 426.582372][ T3749] usb 6-1: USB disconnect, device number 18 [ 426.723456][ T15] usb 8-1: 0:2 : does not exist [ 426.747738][ T15] usb 8-1: USB disconnect, device number 19 [ 426.769994][ T7833] udevd[7833]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 04:26:35 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0xfffffffffffffcf4, &(0x7f0000000100)="b9ff0300008d69e414d518000700bb3a8d511f4bb387a5b813fe0f09001affff45d71e4d7d7de198b94e1e21a6b9ff183f", 0x0, 0x100, 0x6000000000000000}, 0x28) 04:26:35 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 04:26:35 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@dstype0={0x6, 0xe}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:35 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000029fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001000000040400001c007d60b7030000010000006a0a00fe20000000850000000d000000b700000000000000950000fe00000000c9be17044171e1d3d7b1d6d0ff03000000000000c668a4b63e069efb297975738f538e31ec24925095a163b9d4e76be266e31a80212240baa44e080addde6033170000007b3f912f6906a6e2313091df61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd750045404b04bf97c0fea679c032b3203c6cd8bac9626bcc85e961509735a04617dc0200379e731d3a8d8fea894a4ee293001f6ce7d5b40bf2a7399423f84c6fa5f9be8173d05afe002c0e7821d406c967379e7521392d24d6c803482dc7c053498a9f413af569575de3b5c85546945e9bce678ee9a0980650a676d71c01175b060000000000000000a3d39322942df819eea101000000000000009fc8f4b9276e9dc330c9cbac5d708570a14546aa89e13c65896d24684ee25f853b0858122c3d1de564d84638c7f6ec477f9ffece0ff3d9f4cf21c119b95eba4c925c80c3c33c81a68055fc8b3af4f32d16cf290fa9d80f1da0db08da80f7a88b63885551371ee1febf833a4103e2f68d1aa3a2138953c0c41ead2824f4ae3260007396d42e0168a85fc6448b3f2eaab716abe53aa6c1ba9ace891ef38f9a00000000000000000000000000000000000200481ac0f54b7a913f3465c333429c19f5d01166a1c4edc2abdeb53125c27b3d454e25bf47085689e16b524053ac75f36b5b6e7ddf0aa170ec19aee6ccb06c4708e4ec97194d713a36d900004e832541318a8c13c55c40d100e58fb845049af5b0338ba8fc1345d6442b96c2d17bd048a2ed08415600014324db952a44b515d47945babf404c35fd608046f1640f05007842f01d3428843635d4f3e98399b396ea30fc8f9a911a64798a4cf7b63b48349cd630881342c6533f5a9ac85b040000000000000000090000000000009380513278d4701e78251bbc45b73f8d5665d369df748c068b23e3fe886aee0668e58e7158040e0156e332b122288e40fecb03cf48809f341b14b2e50480daf8cbb42692c4771be70f84c314d2a2ed051a1b99cb32eb35caaed27e1aa52faab7c0210aa775293fb49ae476a59f7e3c8ba5eb2e79dbe280780510014edb0130a70ede79424f19aaf8788af4b7fbde150dc369fbc748dfc00127aec198a569a70fa76f0dea86191f7ba504e2d695ad4dd4ae50ced1198e126e41fa3c020ad53182943caa7e1af78eb31debe6d80961ca0e1382cb1f920b73c363651af1836a14c68948e566990946c5503bd7fcae214be7a9c3c7b676427d102751cb6062fcd766bdc3daee453b993ecab8422a4243d5999edae0d556acf95bf9ca4f04bc36fe522a2ccaa64338f73d41736141e216e9fcec797d70eee17ecce30432d5cf67a1a4ebae3c0e434d15e4aae84ceca0c7bc9194e658f20473d8132844b3263a5ce22f56bc8f7f9852a9cf2e4477b57f8997dcac8320cc4eecf07e53fd0db0a01e6f41708f06faf292a67daba456909210a988162923608510e088c85ebb"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0xfffffffffffffcf4, &(0x7f0000000100)="b9ff0300008d69e414d518000700bb3a8d511f4bb387a5b813fe0f09001affff45d71e4d7d7de198b94e1e21a6b9ff183f", 0x0, 0x100, 0x6000000000000000}, 0x28) 04:26:35 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:35 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:35 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0xfffffffffffffcf4, &(0x7f0000000100)="b9ff0300008d69e414d518000700bb3a8d511f4bb387a5b813fe0f09001affff45d71e4d7d7de198b94e1e21a6b9ff183f", 0x0, 0x100, 0x6000000000000000}, 0x28) 04:26:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) [ 427.463316][ T15] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 427.703270][ T15] usb 6-1: Using ep0 maxpacket: 32 [ 427.833370][ T15] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.839987][ T15] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.847247][ T15] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.854450][ T15] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 427.860645][ T15] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 427.868410][ T15] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 428.053595][ T15] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.060425][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.066578][ T15] usb 6-1: Product: syz [ 428.069819][ T15] usb 6-1: Manufacturer: syz [ 428.073015][ T15] usb 6-1: SerialNumber: syz [ 428.353634][ T15] cdc_ncm 6-1:1.0: bind() failure [ 428.362419][ T15] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 428.367603][ T15] cdc_ncm 6-1:1.1: bind() failure [ 428.377799][ T15] usb 6-1: USB disconnect, device number 19 04:26:37 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:37 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@dstype0={0x6, 0xe}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:37 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 04:26:37 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:37 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:37 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:37 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:37 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:37 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@dstype0={0x6, 0xe}], 0x1) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) [ 429.123204][ T34] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 429.363203][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 429.483506][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.491658][ T34] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.498870][ T34] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 429.505866][ T34] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 429.513707][ T34] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 429.520069][ T34] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 429.683380][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.690265][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.697007][ T34] usb 6-1: Product: syz [ 429.700744][ T34] usb 6-1: Manufacturer: syz [ 429.704762][ T34] usb 6-1: SerialNumber: syz [ 429.973495][ T34] cdc_ncm 6-1:1.0: bind() failure [ 429.982651][ T34] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 429.989466][ T34] cdc_ncm 6-1:1.1: bind() failure [ 429.996201][ T34] usb 6-1: USB disconnect, device number 20 04:26:39 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 04:26:39 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:39 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:39 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:39 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:39 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 430.753248][ T6113] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 430.993240][ T6113] usb 6-1: Using ep0 maxpacket: 32 [ 431.125648][ T6113] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.133178][ T6113] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.140554][ T6113] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 431.147058][ T6113] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 431.153106][ T6113] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 431.159878][ T6113] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 431.323774][ T6113] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.329511][ T6113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.336929][ T6113] usb 6-1: Product: syz [ 431.340010][ T6113] usb 6-1: Manufacturer: syz [ 431.344177][ T6113] usb 6-1: SerialNumber: syz [ 431.633384][ T6113] cdc_ncm 6-1:1.0: bind() failure [ 431.642827][ T6113] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 431.648576][ T6113] cdc_ncm 6-1:1.1: bind() failure [ 431.660759][ T6113] usb 6-1: USB disconnect, device number 21 04:26:40 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) 04:26:40 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:40 executing program 1: syz_usb_connect$uac1(0x0, 0x95, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x5}, @selector_unit={0x5}, @selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 04:26:40 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) 04:26:40 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) 04:26:40 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r0, r0, 0x0, 0x4) 04:26:40 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r0, r0, 0x0, 0x4) 04:26:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:41 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:41 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r0, r0, 0x0, 0x4) [ 432.453178][ T3749] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 432.703484][ T3749] usb 6-1: Using ep0 maxpacket: 8 [ 432.833471][ T3749] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 432.841218][ T3749] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.848069][ T3749] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.857306][ T3749] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 432.863530][ T3749] usb 6-1: config 1 interface 1 has no altsetting 0 [ 433.045923][ T3749] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.053421][ T3749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.059082][ T3749] usb 6-1: Product: syz [ 433.062216][ T3749] usb 6-1: Manufacturer: syz [ 433.066331][ T3749] usb 6-1: SerialNumber: syz [ 433.449922][ T3749] usb 6-1: USB disconnect, device number 22 [ 433.471041][ T7833] udevd[7833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 04:26:42 executing program 1: clock_adjtime(0x0, &(0x7f0000000000)={0xffffffff, 0x0, 0x1270aa75, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x101}) 04:26:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:42 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:42 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0) 04:26:42 executing program 1: symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') 04:26:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:42 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:42 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:26:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0xa, &(0x7f00000001c0)=[{0x0, 0x100000000000000}, {&(0x7f0000000180)="e3", 0x1}], 0x2}, 0x0) 04:26:42 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:42 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:42 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:26:42 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:26:42 executing program 1: socket(0x18, 0x0, 0x29) 04:26:42 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:42 executing program 1: symlinkat(&(0x7f0000001140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00') 04:26:42 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:43 executing program 1: r0 = semget(0x0, 0x0, 0x0) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000180)=""/94) 04:26:43 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:43 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2) 04:26:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) [ 434.559502][ T39] audit: type=1400 audit(1656736003.189:379): avc: denied { setattr } for pid=10383 comm="syz-executor.1" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 04:26:43 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000240)={0x0, 0xfff}, 0x0) 04:26:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:43 executing program 1: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) close(r0) 04:26:43 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x40c, 0x0, 0x0) recvmsg(r1, &(0x7f0000000540)={&(0x7f0000001a80), 0x1002, 0x0}, 0x0) 04:26:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 04:26:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:43 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:43 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:44 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:44 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:44 executing program 1: semget(0x0, 0x1, 0x240) 04:26:44 executing program 1: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:26:44 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:44 executing program 1: mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xe02) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/16, 0x10}], 0x1) 04:26:44 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect(r0, &(0x7f0000000040)=@in={0x2, 0x1}, 0xff80) 04:26:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:44 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:44 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:44 executing program 1: r0 = socket(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 04:26:44 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000300)) 04:26:44 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:44 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:44 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c}, 0x1c) 04:26:45 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:45 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@init={0x14, 0x84, 0x1, {0x0, 0x9}}], 0x14}, 0x0) 04:26:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xd, &(0x7f0000001340), 0x4) 04:26:45 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) [ 436.438422][T10504] sctp: [Deprecated]: syz-executor.1 (pid 10504) Use of int in maxseg socket option. [ 436.438422][T10504] Use struct sctp_assoc_value instead 04:26:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240), 0x98) 04:26:45 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:45 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@dstaddrv4={0x10, 0x84, 0x9, @multicast1}], 0x10}, 0x0) 04:26:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:45 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:45 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup2(r0, r0) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 04:26:45 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:45 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:45 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 04:26:45 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000480)="670fd1508b6766c7442400750000006766c74424020e0000006766c744240600000000670f011c24650f01c9660fdd3aba4000b000ee0f01cb2ef20f0fcea6ba4300ec0f4009b884000f00d8", 0x4c}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x4000}, @dstype0={0x6, 0xe}], 0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:26:45 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x4) 04:26:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000080)="94", 0x1}], 0x1, &(0x7f0000000540)=[@init={0x14, 0x84, 0x1, {0x8000}}], 0x14}, 0x0) 04:26:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f000000f000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) 04:26:45 executing program 1: r0 = add_key$user(&(0x7f0000000300), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000580)="1fdb38607178296b3f196ba933615b4e3c2baca435d325f4ffff321f4c2603764aace0a6bbd6f1712c4cb2873f44532005bc702b2d0cc66334a642c69fe4ee0073f2c9296e6b9b14ca97b90e833e2ab5f3b2b6417484d4a302c514dd3a1a6dbdad72d981acb527620a36d4887195b897db53ffe283c2f13f69141f0c056911f81113eb19a8c1b766436067422b6bf3dd25eb39bc0dbd037d4b203c9200caef81dec7be2e56b3c0d6c76522374cc23908c8a8b5e50b44dc6648acef1cb00b2a6a", 0xc0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000140), &(0x7f0000000c00)={'syz', 0x0}, &(0x7f0000000cc0)="0c055953c1322179b3590355ed8ed058f8d669688e681d1d3dff2aa4ea88927cc68c5b90c1c00e70312bec81ce8c6d6ddea29dabf3bc5dfd3f2056b5145693a3ce4868e395bf8e30e7f07ce2ebcfe1d877d41ca978000000000000000000000000000000fc", 0x65, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r2}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={'sha3-512-generic\x00'}}) [ 437.075424][T10550] ------------[ cut here ]------------