ing program) 2022/03/22 00:48:54 fetching corpus: 38150, signal 609071/814750 (executing program) 2022/03/22 00:48:55 fetching corpus: 38200, signal 609306/814750 (executing program) 2022/03/22 00:48:55 fetching corpus: 38249, signal 609519/814750 (executing program) 2022/03/22 00:48:55 fetching corpus: 38299, signal 609749/814750 (executing program) 2022/03/22 00:48:55 fetching corpus: 38349, signal 609964/814750 (executing program) 2022/03/22 00:48:55 fetching corpus: 38399, signal 610301/814750 (executing program) 2022/03/22 00:48:55 fetching corpus: 38449, signal 610472/814750 (executing program) 2022/03/22 00:48:55 fetching corpus: 38499, signal 610685/814750 (executing program) 2022/03/22 00:48:55 fetching corpus: 38549, signal 610833/814750 (executing program) 2022/03/22 00:48:55 fetching corpus: 38599, signal 611108/814750 (executing program) 2022/03/22 00:48:56 fetching corpus: 38649, signal 611270/814750 (executing program) 2022/03/22 00:48:56 fetching corpus: 38699, signal 611752/814750 (executing program) 2022/03/22 00:48:56 fetching corpus: 38749, signal 611979/814750 (executing program) 2022/03/22 00:48:56 fetching corpus: 38799, signal 612317/814750 (executing program) 2022/03/22 00:48:56 fetching corpus: 38849, signal 612515/814750 (executing program) 2022/03/22 00:48:56 fetching corpus: 38899, signal 612692/814750 (executing program) 2022/03/22 00:48:56 fetching corpus: 38949, signal 612913/814750 (executing program) 2022/03/22 00:48:56 fetching corpus: 38999, signal 613102/814750 (executing program) 2022/03/22 00:48:56 fetching corpus: 39049, signal 613261/814750 (executing program) 2022/03/22 00:48:56 fetching corpus: 39099, signal 613459/814750 (executing program) 2022/03/22 00:48:57 fetching corpus: 39149, signal 613661/814750 (executing program) 2022/03/22 00:48:57 fetching corpus: 39199, signal 613842/814750 (executing program) 2022/03/22 00:48:57 fetching corpus: 39249, signal 614021/814750 (executing program) 2022/03/22 00:48:57 fetching corpus: 39299, signal 614207/814750 (executing program) 2022/03/22 00:48:57 fetching corpus: 39349, signal 614387/814750 (executing program) 2022/03/22 00:48:57 fetching corpus: 39399, signal 614600/814750 (executing program) 2022/03/22 00:48:57 fetching corpus: 39449, signal 614757/814750 (executing program) 2022/03/22 00:48:57 fetching corpus: 39499, signal 614947/814750 (executing program) 2022/03/22 00:48:57 fetching corpus: 39549, signal 615174/814750 (executing program) 2022/03/22 00:48:57 fetching corpus: 39599, signal 615366/814750 (executing program) 2022/03/22 00:48:57 fetching corpus: 39649, signal 615562/814750 (executing program) 2022/03/22 00:48:57 fetching corpus: 39699, signal 615747/814750 (executing program) 2022/03/22 00:48:58 fetching corpus: 39749, signal 615919/814750 (executing program) 2022/03/22 00:48:58 fetching corpus: 39799, signal 616101/814750 (executing program) 2022/03/22 00:48:58 fetching corpus: 39849, signal 616316/814750 (executing program) 2022/03/22 00:48:58 fetching corpus: 39899, signal 616482/814750 (executing program) 2022/03/22 00:48:58 fetching corpus: 39949, signal 616629/814750 (executing program) 2022/03/22 00:48:58 fetching corpus: 39999, signal 616773/814750 (executing program) 2022/03/22 00:48:58 fetching corpus: 40049, signal 617029/814750 (executing program) 2022/03/22 00:48:58 fetching corpus: 40099, signal 617249/814750 (executing program) 2022/03/22 00:48:59 fetching corpus: 40149, signal 617462/814750 (executing program) 2022/03/22 00:48:59 fetching corpus: 40199, signal 617685/814750 (executing program) 2022/03/22 00:48:59 fetching corpus: 40249, signal 617865/814750 (executing program) 2022/03/22 00:48:59 fetching corpus: 40299, signal 618042/814750 (executing program) 2022/03/22 00:48:59 fetching corpus: 40349, signal 618246/814750 (executing program) 2022/03/22 00:48:59 fetching corpus: 40399, signal 618508/814750 (executing program) 2022/03/22 00:48:59 fetching corpus: 40449, signal 618753/814750 (executing program) 2022/03/22 00:48:59 fetching corpus: 40499, signal 619036/814750 (executing program) 2022/03/22 00:48:59 fetching corpus: 40549, signal 619197/814750 (executing program) 2022/03/22 00:49:00 fetching corpus: 40599, signal 619364/814750 (executing program) 2022/03/22 00:49:00 fetching corpus: 40649, signal 619530/814750 (executing program) 2022/03/22 00:49:00 fetching corpus: 40699, signal 619694/814750 (executing program) 2022/03/22 00:49:00 fetching corpus: 40749, signal 619954/814750 (executing program) 2022/03/22 00:49:00 fetching corpus: 40799, signal 620143/814750 (executing program) 2022/03/22 00:49:00 fetching corpus: 40849, signal 620357/814750 (executing program) 2022/03/22 00:49:00 fetching corpus: 40899, signal 620527/814750 (executing program) 2022/03/22 00:49:00 fetching corpus: 40949, signal 620739/814750 (executing program) 2022/03/22 00:49:00 fetching corpus: 40999, signal 620930/814750 (executing program) 2022/03/22 00:49:01 fetching corpus: 41049, signal 621112/814750 (executing program) 2022/03/22 00:49:01 fetching corpus: 41099, signal 621354/814750 (executing program) 2022/03/22 00:49:01 fetching corpus: 41149, signal 621534/814750 (executing program) 2022/03/22 00:49:01 fetching corpus: 41199, signal 621731/814750 (executing program) 2022/03/22 00:49:01 fetching corpus: 41249, signal 621881/814750 (executing program) 2022/03/22 00:49:01 fetching corpus: 41299, signal 622039/814750 (executing program) 2022/03/22 00:49:01 fetching corpus: 41349, signal 622228/814750 (executing program) 2022/03/22 00:49:01 fetching corpus: 41399, signal 622407/814750 (executing program) 2022/03/22 00:49:01 fetching corpus: 41449, signal 622632/814750 (executing program) 2022/03/22 00:49:01 fetching corpus: 41499, signal 622820/814750 (executing program) 2022/03/22 00:49:02 fetching corpus: 41549, signal 622996/814750 (executing program) 2022/03/22 00:49:02 fetching corpus: 41599, signal 623172/814750 (executing program) 2022/03/22 00:49:02 fetching corpus: 41649, signal 623342/814750 (executing program) 2022/03/22 00:49:02 fetching corpus: 41699, signal 623525/814750 (executing program) 2022/03/22 00:49:02 fetching corpus: 41749, signal 623723/814750 (executing program) 2022/03/22 00:49:02 fetching corpus: 41799, signal 623897/814750 (executing program) 2022/03/22 00:49:02 fetching corpus: 41849, signal 624064/814750 (executing program) 2022/03/22 00:49:02 fetching corpus: 41899, signal 624232/814750 (executing program) 2022/03/22 00:49:02 fetching corpus: 41949, signal 624388/814750 (executing program) 2022/03/22 00:49:02 fetching corpus: 41999, signal 624650/814750 (executing program) 2022/03/22 00:49:02 fetching corpus: 42049, signal 624863/814750 (executing program) 2022/03/22 00:49:03 fetching corpus: 42099, signal 625070/814750 (executing program) 2022/03/22 00:49:03 fetching corpus: 42149, signal 625343/814750 (executing program) 2022/03/22 00:49:03 fetching corpus: 42199, signal 625469/814750 (executing program) 2022/03/22 00:49:03 fetching corpus: 42249, signal 625642/814751 (executing program) 2022/03/22 00:49:03 fetching corpus: 42299, signal 625822/814751 (executing program) 2022/03/22 00:49:03 fetching corpus: 42349, signal 626157/814751 (executing program) 2022/03/22 00:49:03 fetching corpus: 42399, signal 626370/814751 (executing program) 2022/03/22 00:49:03 fetching corpus: 42449, signal 626684/814751 (executing program) 2022/03/22 00:49:03 fetching corpus: 42499, signal 626880/814751 (executing program) 2022/03/22 00:49:04 fetching corpus: 42549, signal 627029/814751 (executing program) 2022/03/22 00:49:04 fetching corpus: 42599, signal 627222/814751 (executing program) 2022/03/22 00:49:04 fetching corpus: 42649, signal 627464/814751 (executing program) 2022/03/22 00:49:04 fetching corpus: 42699, signal 627658/814751 (executing program) 2022/03/22 00:49:04 fetching corpus: 42749, signal 627833/814751 (executing program) 2022/03/22 00:49:04 fetching corpus: 42799, signal 628106/814751 (executing program) 2022/03/22 00:49:04 fetching corpus: 42849, signal 628271/814751 (executing program) 2022/03/22 00:49:04 fetching corpus: 42899, signal 628539/814751 (executing program) 2022/03/22 00:49:04 fetching corpus: 42949, signal 628750/814751 (executing program) 2022/03/22 00:49:04 fetching corpus: 42999, signal 628933/814751 (executing program) 2022/03/22 00:49:05 fetching corpus: 43049, signal 629057/814751 (executing program) 2022/03/22 00:49:05 fetching corpus: 43099, signal 629287/814751 (executing program) 2022/03/22 00:49:05 fetching corpus: 43149, signal 629444/814751 (executing program) 2022/03/22 00:49:05 fetching corpus: 43199, signal 629743/814751 (executing program) 2022/03/22 00:49:05 fetching corpus: 43249, signal 629891/814751 (executing program) 2022/03/22 00:49:05 fetching corpus: 43299, signal 630059/814751 (executing program) 2022/03/22 00:49:05 fetching corpus: 43349, signal 630212/814751 (executing program) 2022/03/22 00:49:05 fetching corpus: 43399, signal 630393/814751 (executing program) 2022/03/22 00:49:05 fetching corpus: 43449, signal 630659/814751 (executing program) 2022/03/22 00:49:05 fetching corpus: 43499, signal 630908/814751 (executing program) 2022/03/22 00:49:05 fetching corpus: 43549, signal 631084/814751 (executing program) 2022/03/22 00:49:06 fetching corpus: 43599, signal 631216/814751 (executing program) 2022/03/22 00:49:06 fetching corpus: 43649, signal 631380/814751 (executing program) 2022/03/22 00:49:06 fetching corpus: 43699, signal 631598/814751 (executing program) 2022/03/22 00:49:06 fetching corpus: 43749, signal 631730/814751 (executing program) 2022/03/22 00:49:06 fetching corpus: 43799, signal 631977/814751 (executing program) 2022/03/22 00:49:06 fetching corpus: 43849, signal 632190/814751 (executing program) 2022/03/22 00:49:06 fetching corpus: 43899, signal 632358/814751 (executing program) 2022/03/22 00:49:06 fetching corpus: 43949, signal 632512/814751 (executing program) 2022/03/22 00:49:06 fetching corpus: 43999, signal 632662/814751 (executing program) 2022/03/22 00:49:07 fetching corpus: 44049, signal 632825/814751 (executing program) 2022/03/22 00:49:07 fetching corpus: 44099, signal 632971/814751 (executing program) 2022/03/22 00:49:07 fetching corpus: 44149, signal 633118/814751 (executing program) 2022/03/22 00:49:07 fetching corpus: 44199, signal 633367/814751 (executing program) 2022/03/22 00:49:07 fetching corpus: 44249, signal 633556/814751 (executing program) 2022/03/22 00:49:07 fetching corpus: 44299, signal 633702/814751 (executing program) 2022/03/22 00:49:07 fetching corpus: 44349, signal 634042/814751 (executing program) 2022/03/22 00:49:07 fetching corpus: 44399, signal 634195/814751 (executing program) 2022/03/22 00:49:07 fetching corpus: 44449, signal 634484/814751 (executing program) 2022/03/22 00:49:08 fetching corpus: 44499, signal 634688/814751 (executing program) 2022/03/22 00:49:08 fetching corpus: 44549, signal 634901/814751 (executing program) 2022/03/22 00:49:08 fetching corpus: 44599, signal 635099/814751 (executing program) 2022/03/22 00:49:08 fetching corpus: 44649, signal 635330/814751 (executing program) 2022/03/22 00:49:08 fetching corpus: 44699, signal 635489/814751 (executing program) 2022/03/22 00:49:08 fetching corpus: 44749, signal 635710/814751 (executing program) 2022/03/22 00:49:08 fetching corpus: 44799, signal 636037/814751 (executing program) 2022/03/22 00:49:08 fetching corpus: 44849, signal 636356/814751 (executing program) 2022/03/22 00:49:08 fetching corpus: 44899, signal 636497/814751 (executing program) 2022/03/22 00:49:08 fetching corpus: 44949, signal 636761/814751 (executing program) 2022/03/22 00:49:09 fetching corpus: 44999, signal 636955/814751 (executing program) 2022/03/22 00:49:09 fetching corpus: 45049, signal 637080/814751 (executing program) 2022/03/22 00:49:09 fetching corpus: 45099, signal 637240/814751 (executing program) 2022/03/22 00:49:09 fetching corpus: 45149, signal 637391/814751 (executing program) 2022/03/22 00:49:09 fetching corpus: 45199, signal 637525/814751 (executing program) 2022/03/22 00:49:09 fetching corpus: 45249, signal 637711/814751 (executing program) 2022/03/22 00:49:09 fetching corpus: 45299, signal 637975/814751 (executing program) 2022/03/22 00:49:09 fetching corpus: 45349, signal 638199/814751 (executing program) 2022/03/22 00:49:09 fetching corpus: 45399, signal 638435/814751 (executing program) 2022/03/22 00:49:09 fetching corpus: 45449, signal 638598/814751 (executing program) 2022/03/22 00:49:09 fetching corpus: 45499, signal 638763/814751 (executing program) 2022/03/22 00:49:09 fetching corpus: 45549, signal 638987/814751 (executing program) 2022/03/22 00:49:10 fetching corpus: 45599, signal 639235/814751 (executing program) 2022/03/22 00:49:10 fetching corpus: 45649, signal 639521/814751 (executing program) 2022/03/22 00:49:10 fetching corpus: 45699, signal 639641/814751 (executing program) 2022/03/22 00:49:10 fetching corpus: 45749, signal 639811/814751 (executing program) 2022/03/22 00:49:10 fetching corpus: 45799, signal 639996/814751 (executing program) 2022/03/22 00:49:10 fetching corpus: 45849, signal 640171/814751 (executing program) 2022/03/22 00:49:10 fetching corpus: 45899, signal 640296/814751 (executing program) 2022/03/22 00:49:10 fetching corpus: 45949, signal 640448/814751 (executing program) 2022/03/22 00:49:11 fetching corpus: 45999, signal 640633/814751 (executing program) 2022/03/22 00:49:11 fetching corpus: 46049, signal 640788/814751 (executing program) 2022/03/22 00:49:11 fetching corpus: 46099, signal 641010/814751 (executing program) 2022/03/22 00:49:11 fetching corpus: 46149, signal 641130/814751 (executing program) 2022/03/22 00:49:11 fetching corpus: 46199, signal 641344/814751 (executing program) 2022/03/22 00:49:11 fetching corpus: 46249, signal 641545/814751 (executing program) 2022/03/22 00:49:12 fetching corpus: 46299, signal 641745/814751 (executing program) 2022/03/22 00:49:12 fetching corpus: 46349, signal 641921/814751 (executing program) 2022/03/22 00:49:12 fetching corpus: 46399, signal 642093/814751 (executing program) 2022/03/22 00:49:12 fetching corpus: 46449, signal 642299/814751 (executing program) 2022/03/22 00:49:12 fetching corpus: 46499, signal 642432/814751 (executing program) 2022/03/22 00:49:12 fetching corpus: 46549, signal 642680/814751 (executing program) 2022/03/22 00:49:12 fetching corpus: 46599, signal 642876/814751 (executing program) 2022/03/22 00:49:12 fetching corpus: 46649, signal 643075/814751 (executing program) 2022/03/22 00:49:12 fetching corpus: 46699, signal 643209/814751 (executing program) 2022/03/22 00:49:13 fetching corpus: 46749, signal 643363/814751 (executing program) 2022/03/22 00:49:13 fetching corpus: 46799, signal 643508/814751 (executing program) 2022/03/22 00:49:13 fetching corpus: 46849, signal 643680/814751 (executing program) 2022/03/22 00:49:13 fetching corpus: 46899, signal 643827/814751 (executing program) 2022/03/22 00:49:13 fetching corpus: 46949, signal 644029/814751 (executing program) 2022/03/22 00:49:13 fetching corpus: 46999, signal 644176/814751 (executing program) 2022/03/22 00:49:13 fetching corpus: 47049, signal 644310/814751 (executing program) 2022/03/22 00:49:13 fetching corpus: 47099, signal 644483/814751 (executing program) 2022/03/22 00:49:13 fetching corpus: 47149, signal 644671/814751 (executing program) 2022/03/22 00:49:13 fetching corpus: 47199, signal 644799/814751 (executing program) 2022/03/22 00:49:13 fetching corpus: 47249, signal 644944/814751 (executing program) 2022/03/22 00:49:14 fetching corpus: 47299, signal 645098/814751 (executing program) 2022/03/22 00:49:14 fetching corpus: 47349, signal 645260/814751 (executing program) 2022/03/22 00:49:14 fetching corpus: 47399, signal 645413/814751 (executing program) 2022/03/22 00:49:14 fetching corpus: 47449, signal 645605/814751 (executing program) 2022/03/22 00:49:14 fetching corpus: 47499, signal 645815/814751 (executing program) 2022/03/22 00:49:14 fetching corpus: 47549, signal 645971/814751 (executing program) 2022/03/22 00:49:14 fetching corpus: 47599, signal 646175/814751 (executing program) 2022/03/22 00:49:14 fetching corpus: 47649, signal 646407/814751 (executing program) 2022/03/22 00:49:14 fetching corpus: 47699, signal 646528/814751 (executing program) 2022/03/22 00:49:14 fetching corpus: 47749, signal 646673/814751 (executing program) 2022/03/22 00:49:14 fetching corpus: 47799, signal 646942/814751 (executing program) 2022/03/22 00:49:14 fetching corpus: 47849, signal 647068/814751 (executing program) 2022/03/22 00:49:15 fetching corpus: 47899, signal 647224/814751 (executing program) 2022/03/22 00:49:15 fetching corpus: 47949, signal 647447/814751 (executing program) 2022/03/22 00:49:15 fetching corpus: 47999, signal 647577/814751 (executing program) 2022/03/22 00:49:15 fetching corpus: 48049, signal 647733/814751 (executing program) 2022/03/22 00:49:15 fetching corpus: 48099, signal 647862/814751 (executing program) 2022/03/22 00:49:15 fetching corpus: 48149, signal 648070/814751 (executing program) 2022/03/22 00:49:15 fetching corpus: 48199, signal 648256/814751 (executing program) 2022/03/22 00:49:15 fetching corpus: 48249, signal 648387/814751 (executing program) 2022/03/22 00:49:16 fetching corpus: 48298, signal 648519/814751 (executing program) 2022/03/22 00:49:16 fetching corpus: 48348, signal 648826/814751 (executing program) 2022/03/22 00:49:16 fetching corpus: 48398, signal 648995/814751 (executing program) 2022/03/22 00:49:16 fetching corpus: 48448, signal 649234/814751 (executing program) 2022/03/22 00:49:16 fetching corpus: 48498, signal 649451/814751 (executing program) 2022/03/22 00:49:16 fetching corpus: 48548, signal 649612/814751 (executing program) 2022/03/22 00:49:16 fetching corpus: 48598, signal 649828/814751 (executing program) 2022/03/22 00:49:16 fetching corpus: 48648, signal 649958/814751 (executing program) 2022/03/22 00:49:16 fetching corpus: 48698, signal 650076/814751 (executing program) 2022/03/22 00:49:16 fetching corpus: 48748, signal 650274/814751 (executing program) 2022/03/22 00:49:16 fetching corpus: 48798, signal 650423/814751 (executing program) 2022/03/22 00:49:17 fetching corpus: 48848, signal 650560/814751 (executing program) 2022/03/22 00:49:17 fetching corpus: 48898, signal 650733/814751 (executing program) 2022/03/22 00:49:17 fetching corpus: 48948, signal 650949/814751 (executing program) 2022/03/22 00:49:17 fetching corpus: 48998, signal 651161/814751 (executing program) 2022/03/22 00:49:17 fetching corpus: 49048, signal 651329/814751 (executing program) 2022/03/22 00:49:17 fetching corpus: 49098, signal 651544/814751 (executing program) 2022/03/22 00:49:17 fetching corpus: 49148, signal 651730/814751 (executing program) 2022/03/22 00:49:17 fetching corpus: 49198, signal 651861/814751 (executing program) 2022/03/22 00:49:17 fetching corpus: 49248, signal 652072/814751 (executing program) 2022/03/22 00:49:17 fetching corpus: 49298, signal 652234/814751 (executing program) 2022/03/22 00:49:17 fetching corpus: 49348, signal 652410/814751 (executing program) 2022/03/22 00:49:17 fetching corpus: 49398, signal 652729/814751 (executing program) 2022/03/22 00:49:18 fetching corpus: 49448, signal 652878/814751 (executing program) 2022/03/22 00:49:18 fetching corpus: 49498, signal 653061/814751 (executing program) 2022/03/22 00:49:18 fetching corpus: 49548, signal 653212/814751 (executing program) 2022/03/22 00:49:18 fetching corpus: 49598, signal 653353/814751 (executing program) 2022/03/22 00:49:18 fetching corpus: 49648, signal 653504/814751 (executing program) 2022/03/22 00:49:18 fetching corpus: 49698, signal 653814/814751 (executing program) 2022/03/22 00:49:18 fetching corpus: 49748, signal 653979/814751 (executing program) 2022/03/22 00:49:18 fetching corpus: 49798, signal 654154/814751 (executing program) 2022/03/22 00:49:18 fetching corpus: 49848, signal 654306/814751 (executing program) 2022/03/22 00:49:18 fetching corpus: 49898, signal 654448/814751 (executing program) 2022/03/22 00:49:19 fetching corpus: 49948, signal 654608/814751 (executing program) 2022/03/22 00:49:19 fetching corpus: 49998, signal 654724/814751 (executing program) 2022/03/22 00:49:19 fetching corpus: 50048, signal 654936/814751 (executing program) 2022/03/22 00:49:19 fetching corpus: 50098, signal 655123/814751 (executing program) 2022/03/22 00:49:19 fetching corpus: 50147, signal 655332/814751 (executing program) 2022/03/22 00:49:19 fetching corpus: 50197, signal 655505/814751 (executing program) 2022/03/22 00:49:19 fetching corpus: 50247, signal 655649/814751 (executing program) 2022/03/22 00:49:19 fetching corpus: 50297, signal 655804/814751 (executing program) 2022/03/22 00:49:19 fetching corpus: 50347, signal 655941/814751 (executing program) 2022/03/22 00:49:19 fetching corpus: 50397, signal 656084/814751 (executing program) 2022/03/22 00:49:19 fetching corpus: 50447, signal 656264/814751 (executing program) 2022/03/22 00:49:20 fetching corpus: 50497, signal 656426/814751 (executing program) 2022/03/22 00:49:20 fetching corpus: 50547, signal 656611/814752 (executing program) 2022/03/22 00:49:20 fetching corpus: 50597, signal 656792/814752 (executing program) 2022/03/22 00:49:20 fetching corpus: 50647, signal 656972/814752 (executing program) 2022/03/22 00:49:21 fetching corpus: 50697, signal 657147/814752 (executing program) 2022/03/22 00:49:21 fetching corpus: 50747, signal 657257/814752 (executing program) 2022/03/22 00:49:21 fetching corpus: 50797, signal 657402/814752 (executing program) 2022/03/22 00:49:21 fetching corpus: 50847, signal 657623/814752 (executing program) 2022/03/22 00:49:21 fetching corpus: 50897, signal 657766/814752 (executing program) 2022/03/22 00:49:21 fetching corpus: 50947, signal 657881/814752 (executing program) 2022/03/22 00:49:22 fetching corpus: 50997, signal 658075/814752 (executing program) 2022/03/22 00:49:22 fetching corpus: 51047, signal 658219/814752 (executing program) 2022/03/22 00:49:22 fetching corpus: 51097, signal 658369/814752 (executing program) 2022/03/22 00:49:22 fetching corpus: 51147, signal 658468/814753 (executing program) 2022/03/22 00:49:22 fetching corpus: 51197, signal 658676/814753 (executing program) 2022/03/22 00:49:22 fetching corpus: 51247, signal 658828/814758 (executing program) 2022/03/22 00:49:22 fetching corpus: 51297, signal 658971/814758 (executing program) 2022/03/22 00:49:22 fetching corpus: 51347, signal 659191/814758 (executing program) 2022/03/22 00:49:22 fetching corpus: 51397, signal 659389/814758 (executing program) 2022/03/22 00:49:23 fetching corpus: 51447, signal 659534/814758 (executing program) 2022/03/22 00:49:23 fetching corpus: 51497, signal 659691/814758 (executing program) 2022/03/22 00:49:23 fetching corpus: 51547, signal 659852/814758 (executing program) 2022/03/22 00:49:23 fetching corpus: 51597, signal 660027/814758 (executing program) 2022/03/22 00:49:23 fetching corpus: 51647, signal 660180/814758 (executing program) 2022/03/22 00:49:23 fetching corpus: 51697, signal 660378/814758 (executing program) 2022/03/22 00:49:23 fetching corpus: 51747, signal 660513/814758 (executing program) 2022/03/22 00:49:23 fetching corpus: 51797, signal 660680/814758 (executing program) 2022/03/22 00:49:23 fetching corpus: 51847, signal 660901/814758 (executing program) 2022/03/22 00:49:24 fetching corpus: 51897, signal 661082/814758 (executing program) 2022/03/22 00:49:24 fetching corpus: 51947, signal 661269/814758 (executing program) 2022/03/22 00:49:24 fetching corpus: 51997, signal 661407/814758 (executing program) 2022/03/22 00:49:24 fetching corpus: 52047, signal 661585/814758 (executing program) 2022/03/22 00:49:24 fetching corpus: 52097, signal 661735/814758 (executing program) 2022/03/22 00:49:24 fetching corpus: 52147, signal 661911/814758 (executing program) 2022/03/22 00:49:24 fetching corpus: 52197, signal 662057/814758 (executing program) 2022/03/22 00:49:24 fetching corpus: 52214, signal 662104/814758 (executing program) 2022/03/22 00:49:24 fetching corpus: 52214, signal 662104/814758 (executing program) 2022/03/22 00:49:26 starting 6 fuzzer processes 00:49:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) 00:49:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x7, 0x4) 00:49:26 executing program 1: r0 = add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) setfsgid(0x0) socket(0x0, 0x0, 0x0) 00:49:26 executing program 3: syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="cab1f12773b9b643097bb5cbcd7fc26aa9971e19c02cc5554b71e8e38f726ebda41aa261e1b588c10131b775c90ea2eb0072b174be65c07439129705fd8c5b18b6d5eabc56b0d8e8", 0x0, 0xfffffffffffffdcd) 00:49:26 executing program 4: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000380)) 00:49:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 167.808852][ T25] audit: type=1400 audit(1647910167.016:84): avc: denied { execmem } for pid=3617 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 168.014752][ T25] audit: type=1400 audit(1647910167.226:85): avc: denied { mounton } for pid=3624 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 168.071647][ T25] audit: type=1400 audit(1647910167.226:86): avc: denied { mount } for pid=3624 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 168.095933][ T25] audit: type=1400 audit(1647910167.226:87): avc: denied { create } for pid=3624 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.116087][ T25] audit: type=1400 audit(1647910167.226:88): avc: denied { read write } for pid=3624 comm="syz-executor.0" name="vhci" dev="devtmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 168.139824][ T25] audit: type=1400 audit(1647910167.226:89): avc: denied { open } for pid=3624 comm="syz-executor.0" path="/dev/vhci" dev="devtmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 169.092515][ T25] audit: type=1400 audit(1647910168.296:90): avc: denied { ioctl } for pid=3627 comm="syz-executor.5" path="socket:[27624]" dev="sockfs" ino=27624 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.130087][ T3639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.130539][ T3640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.138062][ T3639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.145710][ T3640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.155625][ T3639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.158996][ T3640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.166491][ T3639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.176202][ T3640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.188205][ T3640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.194824][ T3644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.195467][ T3640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.202129][ T3644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.209661][ T3640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.216892][ T3644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.231441][ T3640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.232458][ T3644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.239664][ T3640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.245928][ T3644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.253044][ T3640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.259745][ T3644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.266729][ T3640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.274861][ T3644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.280896][ T3640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.287591][ T3644] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.295098][ T3640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.301359][ T3644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.308376][ T3640] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 169.315394][ T3644] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 169.322428][ T3640] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.328979][ T3644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.336011][ T3640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.343648][ T3644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.350135][ T3640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.356857][ T3644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.364260][ T3640] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.375292][ T25] audit: type=1400 audit(1647910168.576:91): avc: denied { read } for pid=3628 comm="syz-executor.1" dev="nsfs" ino=4026531992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 169.380018][ T46] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.457876][ T25] audit: type=1400 audit(1647910168.616:92): avc: denied { open } for pid=3625 comm="syz-executor.3" path="net:[4026531992]" dev="nsfs" ino=4026531992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 169.481729][ T25] audit: type=1400 audit(1647910168.626:93): avc: denied { mounton } for pid=3626 comm="syz-executor.4" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 169.837792][ T3627] chnl_net:caif_netlink_parms(): no params data found [ 169.850030][ T3626] chnl_net:caif_netlink_parms(): no params data found [ 169.921784][ T3624] chnl_net:caif_netlink_parms(): no params data found [ 169.962206][ T3628] chnl_net:caif_netlink_parms(): no params data found [ 170.044540][ T3629] chnl_net:caif_netlink_parms(): no params data found [ 170.089026][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.096534][ T3626] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.104595][ T3626] device bridge_slave_0 entered promiscuous mode [ 170.127326][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.135219][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.143148][ T3627] device bridge_slave_0 entered promiscuous mode [ 170.159533][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.166709][ T3626] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.175256][ T3626] device bridge_slave_1 entered promiscuous mode [ 170.199957][ T3625] chnl_net:caif_netlink_parms(): no params data found [ 170.215907][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.223028][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.230655][ T3627] device bridge_slave_1 entered promiscuous mode [ 170.260529][ T3626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.310496][ T3626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.332617][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.340424][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.348849][ T3624] device bridge_slave_0 entered promiscuous mode [ 170.389943][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.398408][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.406854][ T3624] device bridge_slave_1 entered promiscuous mode [ 170.416039][ T3627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.436098][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.443569][ T3628] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.451212][ T3628] device bridge_slave_0 entered promiscuous mode [ 170.462528][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.469908][ T3628] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.477891][ T3628] device bridge_slave_1 entered promiscuous mode [ 170.497327][ T3627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.517644][ T3626] team0: Port device team_slave_0 added [ 170.530155][ T3626] team0: Port device team_slave_1 added [ 170.590165][ T3624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.607791][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.617847][ T3629] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.626415][ T3629] device bridge_slave_0 entered promiscuous mode [ 170.649459][ T3628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.669784][ T3624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.681708][ T3627] team0: Port device team_slave_0 added [ 170.690572][ T3627] team0: Port device team_slave_1 added [ 170.696610][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.707072][ T3629] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.715331][ T3629] device bridge_slave_1 entered promiscuous mode [ 170.722302][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.729592][ T3625] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.738832][ T3625] device bridge_slave_0 entered promiscuous mode [ 170.748219][ T3628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.757905][ T3626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.765435][ T3626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.792103][ T3626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.805865][ T3626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.812873][ T3626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.838775][ T3626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.881628][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.888758][ T3625] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.897148][ T3625] device bridge_slave_1 entered promiscuous mode [ 170.933535][ T3627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.940485][ T3627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.966740][ T3627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.016849][ T3624] team0: Port device team_slave_0 added [ 171.023333][ T3627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.030278][ T3627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.056309][ T3627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.069664][ T3629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.089497][ T3628] team0: Port device team_slave_0 added [ 171.099929][ T3626] device hsr_slave_0 entered promiscuous mode [ 171.106640][ T3626] device hsr_slave_1 entered promiscuous mode [ 171.119332][ T3624] team0: Port device team_slave_1 added [ 171.127517][ T3629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.138835][ T3625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.149863][ T3628] team0: Port device team_slave_1 added [ 171.191774][ T3625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.232258][ T3629] team0: Port device team_slave_0 added [ 171.270584][ T3624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.277566][ T3624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.303561][ T3624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.319630][ T3629] team0: Port device team_slave_1 added [ 171.337396][ T3628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.344825][ T3628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.371000][ T3628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.385874][ T3627] device hsr_slave_0 entered promiscuous mode [ 171.392538][ T3627] device hsr_slave_1 entered promiscuous mode [ 171.399060][ T3627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.407910][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 171.414778][ T3627] Cannot create hsr debugfs directory [ 171.420708][ T3624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.427753][ T3624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.453684][ T3624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.477172][ T3625] team0: Port device team_slave_0 added [ 171.483016][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 171.489041][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 171.493027][ T141] Bluetooth: hci3: command 0x0409 tx timeout [ 171.501006][ T141] Bluetooth: hci1: command 0x0409 tx timeout [ 171.501975][ T3628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.515281][ T3628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.515586][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 171.541576][ T3628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.581701][ T3625] team0: Port device team_slave_1 added [ 171.607840][ T3629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.614896][ T3629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.641006][ T3629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.680424][ T3625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.687526][ T3625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.713744][ T3625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.739902][ T3629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.746923][ T3629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.773008][ T3629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.792158][ T3624] device hsr_slave_0 entered promiscuous mode [ 171.799090][ T3624] device hsr_slave_1 entered promiscuous mode [ 171.809701][ T3624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.817567][ T3624] Cannot create hsr debugfs directory [ 171.834150][ T3625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.841090][ T3625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.867279][ T3625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.935085][ T3628] device hsr_slave_0 entered promiscuous mode [ 171.941757][ T3628] device hsr_slave_1 entered promiscuous mode [ 171.948422][ T3628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.956525][ T3628] Cannot create hsr debugfs directory [ 172.011010][ T3629] device hsr_slave_0 entered promiscuous mode [ 172.019834][ T3629] device hsr_slave_1 entered promiscuous mode [ 172.026920][ T3629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.034882][ T3629] Cannot create hsr debugfs directory [ 172.103267][ T3625] device hsr_slave_0 entered promiscuous mode [ 172.110195][ T3625] device hsr_slave_1 entered promiscuous mode [ 172.117079][ T3625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.128817][ T3625] Cannot create hsr debugfs directory [ 172.385429][ T3626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.401311][ T3626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.421769][ T3626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.430863][ T3626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.446553][ T3627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.474549][ T3627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.483982][ T3627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.501352][ T3627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.560721][ T3624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.585906][ T3624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.601570][ T3624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.628577][ T3624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.672423][ T3629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.685643][ T3629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.696280][ T3629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.709779][ T3629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.811841][ T3628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.821405][ T3628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.840146][ T3626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.863673][ T3628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.896504][ T3626] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.911677][ T3627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.919885][ T3628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.929712][ T3625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.939479][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.953397][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.985414][ T3627] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.992222][ T3625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.002455][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.011758][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.021793][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.029096][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.037612][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.046766][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.055290][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.062341][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.070678][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.078459][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.123404][ T3625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.132010][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.145419][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.154464][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.162861][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.169910][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.177914][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.186751][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.195239][ T3678] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.202283][ T3678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.210133][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.219034][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.227640][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.237156][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.263139][ T3625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.295005][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.304966][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.313586][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.322031][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.330733][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.339702][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.362621][ T3626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.376941][ T3626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.408006][ T3627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.419322][ T3627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.435623][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.445711][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.454527][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.465667][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.474516][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.482787][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.483613][ T3677] Bluetooth: hci2: command 0x041b tx timeout [ 173.491762][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.505668][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.514505][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.522860][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.531145][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.539714][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.549827][ T3624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.562954][ T3677] Bluetooth: hci4: command 0x041b tx timeout [ 173.571547][ T3677] Bluetooth: hci5: command 0x041b tx timeout [ 173.574223][ T3675] Bluetooth: hci1: command 0x041b tx timeout [ 173.595481][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.603002][ T3677] Bluetooth: hci3: command 0x041b tx timeout [ 173.603035][ T3677] Bluetooth: hci0: command 0x041b tx timeout [ 173.617842][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.626065][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.639747][ T3624] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.667455][ T3629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.691320][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.699481][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.707419][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.715158][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.722515][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.730990][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.749910][ T3626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.768467][ T25] audit: type=1400 audit(1647910172.976:94): avc: denied { module_request } for pid=3626 comm="syz-executor.4" kmod="netdev-netdevsim4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 173.775479][ T3628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.817086][ T3629] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.826889][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.840958][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.851647][ T25] audit: type=1400 audit(1647910173.066:95): avc: denied { sys_module } for pid=3626 comm="syz-executor.4" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 173.874263][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.881327][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.889316][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.897908][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.906673][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.913808][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.921392][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.928948][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.944808][ T3627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.960385][ T3628] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.983929][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.992054][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.012655][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.046348][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.057270][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.066159][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.075055][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.083831][ T3677] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.090883][ T3677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.098813][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.107646][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.116526][ T3677] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.123627][ T3677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.134024][ T3677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.175051][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.197052][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.231198][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.240900][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.257690][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.264831][ T3680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.272927][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.281405][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.290311][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.298959][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.307534][ T3680] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.314660][ T3680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.322258][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.330935][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.351717][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.359874][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.367914][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.378985][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.405944][ T3629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.433461][ T3629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.451437][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.475759][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.487490][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.496798][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.506128][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.514710][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.523229][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.531538][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.540044][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.596129][ T3625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.610272][ T3624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.634104][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.642266][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.666683][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.678315][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.687796][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.697289][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.705854][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.714423][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.727233][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.743292][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.751775][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.760293][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.769255][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.797275][ T3628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.817947][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.872526][ T3629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.900341][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.910357][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.918173][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.926887][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.936152][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.943691][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.951085][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.958661][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.969837][ T3625] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.999088][ T3624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.072171][ T3628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.105379][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.115395][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.128428][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.135567][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.163575][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.172415][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.185627][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.194970][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.203980][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.211031][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.218874][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.228504][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.236548][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.252265][ T3626] device veth0_vlan entered promiscuous mode [ 175.280739][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.290130][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.321701][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.340362][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.354138][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.373221][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.381861][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.408495][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.442471][ T3625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.460997][ T3625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.485260][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.503430][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.513776][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.521816][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.557363][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.563140][ T5] Bluetooth: hci2: command 0x040f tx timeout [ 175.590620][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.599138][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.611985][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.620538][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.637967][ T3672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.642940][ T3261] Bluetooth: hci0: command 0x040f tx timeout [ 175.646194][ T3676] Bluetooth: hci1: command 0x040f tx timeout [ 175.657856][ T3261] Bluetooth: hci3: command 0x040f tx timeout [ 175.669782][ T3261] Bluetooth: hci5: command 0x040f tx timeout [ 175.679457][ T3626] device veth1_vlan entered promiscuous mode [ 175.692934][ T3261] Bluetooth: hci4: command 0x040f tx timeout [ 175.706603][ T3627] device veth0_vlan entered promiscuous mode [ 175.735046][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.746302][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.762016][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.771334][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.783198][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.790573][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.806465][ T3629] device veth0_vlan entered promiscuous mode [ 175.825636][ T3625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.836711][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.848720][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.861463][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.874316][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.889649][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.909433][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.952358][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.963753][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.980749][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.992217][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.008750][ T3627] device veth1_vlan entered promiscuous mode [ 176.022267][ T3629] device veth1_vlan entered promiscuous mode [ 176.033661][ T3624] device veth0_vlan entered promiscuous mode [ 176.042354][ T3626] device veth0_macvtap entered promiscuous mode [ 176.065845][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.082276][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.091034][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.107432][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.117078][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.126302][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.135281][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.153683][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.161800][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.170652][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.178826][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.189339][ T3626] device veth1_macvtap entered promiscuous mode [ 176.218991][ T3628] device veth0_vlan entered promiscuous mode [ 176.232355][ T3628] device veth1_vlan entered promiscuous mode [ 176.244571][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.252418][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.261452][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.270588][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.279208][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.287940][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.324828][ T3629] device veth0_macvtap entered promiscuous mode [ 176.336748][ T3624] device veth1_vlan entered promiscuous mode [ 176.350476][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.359778][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.368221][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.376478][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.384582][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.392447][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.400955][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.409341][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.418100][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.428571][ T3626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.437857][ T3627] device veth0_macvtap entered promiscuous mode [ 176.450691][ T3629] device veth1_macvtap entered promiscuous mode [ 176.465081][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.473354][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.481276][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.490420][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.501960][ T3626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.534732][ T3627] device veth1_macvtap entered promiscuous mode [ 176.542250][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.551631][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.560513][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.571076][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.579710][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.588559][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.601563][ T3626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.611020][ T3626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.620001][ T3626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.633000][ T3626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.644006][ T3625] device veth0_vlan entered promiscuous mode [ 176.656234][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.664398][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.674001][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.682361][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.703515][ T3629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.719001][ T3629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.731007][ T3629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.745899][ T3629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.756428][ T3629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.769592][ T3629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.777681][ T3628] device veth0_macvtap entered promiscuous mode [ 176.791450][ T3624] device veth0_macvtap entered promiscuous mode [ 176.801122][ T3625] device veth1_vlan entered promiscuous mode [ 176.810861][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.819975][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.828367][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.836890][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.846029][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.855221][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.864126][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.875048][ T3629] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.886496][ T3629] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.896715][ T3629] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.905553][ T3629] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.918379][ T3628] device veth1_macvtap entered promiscuous mode [ 176.932474][ T3627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.943584][ T3627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.953548][ T3627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 176.964035][ T3627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.976325][ T3627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.988954][ T3627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 176.999919][ T3627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.010192][ T3627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.020672][ T3627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.032184][ T3627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.051302][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.059730][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.074844][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.084411][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.093324][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.103750][ T3624] device veth1_macvtap entered promiscuous mode [ 177.145877][ T3627] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.155656][ T3627] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.166622][ T3627] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.175840][ T3627] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.198805][ T3628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.209310][ T3628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.220343][ T3628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.231037][ T3628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.243547][ T3628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.254624][ T3628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.266349][ T3628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.306089][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.322636][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.342110][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.350877][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.359082][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.368394][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.377089][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.386563][ T3628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.397714][ T3628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.408340][ T3628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.418977][ T3628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.428831][ T3628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.439355][ T3628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.450721][ T3628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.479010][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.487645][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.497003][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.505663][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.516879][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.527574][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.538741][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.549326][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.559166][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.574061][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.584511][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 177.600659][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.611976][ T3624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.636827][ T3625] device veth0_macvtap entered promiscuous mode [ 177.644125][ T5] Bluetooth: hci2: command 0x0419 tx timeout [ 177.647325][ T3625] device veth1_macvtap entered promiscuous mode [ 177.660083][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.668677][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.678345][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.689164][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.701093][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.711099][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.721701][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.723335][ T3681] Bluetooth: hci4: command 0x0419 tx timeout [ 177.737574][ T3681] Bluetooth: hci5: command 0x0419 tx timeout [ 177.740191][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.743671][ T3681] Bluetooth: hci1: command 0x0419 tx timeout [ 177.743736][ T3681] Bluetooth: hci3: command 0x0419 tx timeout [ 177.758156][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.760226][ T3681] Bluetooth: hci0: command 0x0419 tx timeout [ 177.770788][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 177.792821][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.805944][ T3624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.814293][ T3628] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.823248][ T3628] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.832057][ T3628] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.841014][ T3628] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.886156][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.895988][ T3681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.907709][ T3624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.917379][ T3624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.927019][ T3624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.936054][ T3624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.952332][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.966384][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.976476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.993188][ T25] audit: type=1400 audit(1647910177.196:96): avc: denied { mounton } for pid=3626 comm="syz-executor.4" path="/dev/binderfs" dev="devtmpfs" ino=2315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 178.024709][ T3625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.025062][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.048819][ T25] audit: type=1400 audit(1647910177.196:97): avc: denied { mount } for pid=3626 comm="syz-executor.4" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 178.072785][ T3625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.079963][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.082588][ T3625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.104320][ T3625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.114480][ T3625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.125984][ T3625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.136152][ T3625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.147427][ T3625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.157408][ T3625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 178.168539][ T3625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.185597][ T3625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.206923][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.221797][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 178.230437][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.252952][ T3625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.270241][ T3625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.274640][ T25] audit: type=1400 audit(1647910177.476:98): avc: denied { read write } for pid=3626 comm="syz-executor.4" name="loop4" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.281793][ T3625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.312219][ T25] audit: type=1400 audit(1647910177.516:99): avc: denied { open } for pid=3626 comm="syz-executor.4" path="/dev/loop4" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 00:49:37 executing program 4: syz_mount_image$f2fs(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 178.351595][ T25] audit: type=1400 audit(1647910177.516:100): avc: denied { ioctl } for pid=3626 comm="syz-executor.4" path="/dev/loop4" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.364697][ T3625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.387596][ T3625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.398484][ T3625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.408804][ T3625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 178.419493][ T3625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.434151][ T3625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 00:49:37 executing program 4: r0 = socket(0x1e, 0x1, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) [ 178.458258][ T3625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.470389][ T3625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.519889][ T25] audit: type=1400 audit(1647910177.726:101): avc: denied { create } for pid=3736 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.545599][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 00:49:37 executing program 4: syz_mount_image$f2fs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 178.556642][ T25] audit: type=1400 audit(1647910177.756:102): avc: denied { setopt } for pid=3736 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.571344][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.589423][ T3625] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 00:49:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x29, 0x6, 0x0, 0x3000000) [ 178.616910][ T3625] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.626958][ T3625] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.635994][ T3625] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:49:37 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x4000}, 0x0) [ 178.695600][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.717112][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.765853][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:49:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x29, 0x31, 0x0, 0x0) [ 178.810960][ T25] audit: type=1400 audit(1647910178.016:103): avc: denied { read } for pid=2948 comm="syslogd" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 178.914336][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.938465][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.024042][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.043220][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.051180][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.103856][ T3674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.123164][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.131137][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.146749][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.178540][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.187500][ T3713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.211289][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.222905][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.227946][ T3713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.233253][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.246061][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.255103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.263122][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.354190][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.391439][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.402312][ T1049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.420730][ T1049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.435179][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 179.483567][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:49:38 executing program 0: r0 = socket(0x1, 0x2, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0) 00:49:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='G', 0x1}], 0x1, &(0x7f00000011c0)=ANY=[], 0x160}, 0x404c010) 00:49:38 executing program 2: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100", @ANYRES16, @ANYBLOB="3ab325bd7000fcdb"], 0x14c}}, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/4088, 0xff8}, {&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000001640)=""/4083, 0xff3}], 0x3, &(0x7f0000000340), 0x14, 0x0) 00:49:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000580)) 00:49:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, r1, 0x831, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) 00:49:38 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f00000011c0)=@framed={{}, [@btf_id, @map_val, @exit, @generic, @generic, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:49:38 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'wg2\x00', {0x2, 0x0, @empty}}) [ 179.708935][ T25] audit: type=1400 audit(1647910178.916:104): avc: denied { prog_load } for pid=3764 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 00:49:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a80)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 00:49:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x29, 0x39, 0x0, 0x0) 00:49:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {}]}) 00:49:39 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='g', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, 0xfffffffffffffff8, 0x0) 00:49:39 executing program 3: r0 = socket(0x1e, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) [ 179.842782][ T25] audit: type=1400 audit(1647910178.946:105): avc: denied { bpf } for pid=3764 comm="syz-executor.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.866762][ T3776] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 00:49:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x35}]}) 00:49:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x84, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x0, @in6=@local}, {{@in6=@private0, 0x0, 0x3c}, 0x2, @in=@loopback, 0x0, 0x1}]}]}, 0x13c}}, 0x0) 00:49:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) 00:49:39 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000012c0), 0x105800, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:49:39 executing program 3: socketpair(0xa, 0x3, 0x40, &(0x7f0000000040)) 00:49:39 executing program 1: socketpair(0x18, 0x0, 0x1, &(0x7f00000015c0)) [ 179.953209][ T25] audit: type=1400 audit(1647910178.946:106): avc: denied { perfmon } for pid=3764 comm="syz-executor.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 00:49:39 executing program 5: socket$inet_tcp(0xf, 0x3, 0x0) 00:49:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) [ 180.064498][ T25] audit: type=1400 audit(1647910178.956:107): avc: denied { read } for pid=3768 comm="syz-executor.3" name="uinput" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 00:49:39 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_pcpu_drain\x00', r0}, 0x10) 00:49:39 executing program 1: socketpair(0x18, 0x0, 0x1, &(0x7f00000015c0)) 00:49:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x18, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x18}}, 0x0) 00:49:39 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, &(0x7f0000000140)) 00:49:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)={0x14, r1, 0x2af108834fa05f57, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 180.219051][ T25] audit: type=1400 audit(1647910178.956:108): avc: denied { open } for pid=3768 comm="syz-executor.3" path="/dev/uinput" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 00:49:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc000000190001000000000000000000ff020000000000000000000000000001ffffffff00000000000000000018000000000000000000000a"], 0xfc}}, 0x0) 00:49:39 executing program 3: gettid() syz_clone(0x18800000, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000100)="8a") 00:49:39 executing program 2: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @private=0xa010100}}}}) 00:49:39 executing program 1: socketpair(0x18, 0x0, 0x1, &(0x7f00000015c0)) 00:49:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc) [ 180.355493][ T25] audit: type=1400 audit(1647910178.996:109): avc: denied { ioctl } for pid=3768 comm="syz-executor.3" path="/dev/uinput" dev="devtmpfs" ino=833 ioctlcmd=0x55ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 00:49:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891b, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) [ 180.427967][ T3815] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. 00:49:39 executing program 3: socketpair(0x0, 0x4c5b30e6f16f026f, 0x0, 0x0) 00:49:39 executing program 0: r0 = socket$inet_tcp(0x11, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 00:49:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8921, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) 00:49:39 executing program 1: socketpair(0x18, 0x0, 0x1, &(0x7f00000015c0)) 00:49:39 executing program 5: r0 = socket(0x1e, 0x1, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) [ 180.522676][ T25] audit: type=1400 audit(1647910179.106:110): avc: denied { create } for pid=3773 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 00:49:39 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe, 0x10, r0, 0x10000000) 00:49:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x300, 0x4) 00:49:39 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/user\x00') [ 180.646910][ T25] audit: type=1400 audit(1647910179.116:111): avc: denied { create } for pid=3771 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 00:49:39 executing program 0: syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000700)=[{0x0}], 0x1000, &(0x7f0000000800)={[{@two_active_logs}], [{@uid_gt}]}) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) 00:49:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x0, 0x0, 0x9}, 0x48) 00:49:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x44, 0x5, [{{@in6=@private0}, 0x3, @in=@loopback, 0x0, 0x1}]}]}, 0xfc}}, 0x0) 00:49:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x29, 0x2c, 0x0, 0x0) 00:49:40 executing program 3: syz_mount_image$f2fs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfshat}]}}) [ 180.747379][ T25] audit: type=1400 audit(1647910179.116:112): avc: denied { ioctl } for pid=3771 comm="syz-executor.4" path="socket:[31146]" dev="sockfs" ino=31146 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 00:49:40 executing program 2: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, 0x0, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\a', 0x1, 0xfffffffffffffffd) 00:49:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000080)) 00:49:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15}, {}]}) 00:49:40 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000180)={0x18}, 0x18) 00:49:40 executing program 2: timer_create(0x0, 0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {r0, r1+10000000}}, 0x0) timer_gettime(0x0, &(0x7f00000000c0)) [ 180.931435][ T3848] fuse: Unknown parameter 'smackfshat' 00:49:40 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCOUTQ(r0, 0x89a0, &(0x7f0000000040)) 00:49:40 executing program 0: syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000700)=[{0x0}], 0x1000, &(0x7f0000000800)={[{@two_active_logs}], [{@uid_gt}]}) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) 00:49:40 executing program 5: pselect6(0x55, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 00:49:40 executing program 1: timer_create(0x2, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000001440)={{0x0, 0x3938700}}, 0x0) 00:49:40 executing program 3: clock_settime(0xafc3406ad5024aa7, &(0x7f00000002c0)={0x0, 0x989680}) 00:49:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r1, 0x701, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}}, 0x0) 00:49:40 executing program 1: syz_clone(0x0, 0x0, 0x0, &(0x7f0000001640), 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 00:49:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xb, &(0x7f0000000000), 0x4) 00:49:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x29, 0x2, 0x0, 0x0) 00:49:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x4800) 00:49:40 executing program 0: syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000700)=[{0x0}], 0x1000, &(0x7f0000000800)={[{@two_active_logs}], [{@uid_gt}]}) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) 00:49:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newsa={0xf0, 0x10, 0x5, 0x0, 0x0, {{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 00:49:40 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8954, 0x0) 00:49:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x891d, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) 00:49:40 executing program 3: sigaltstack(&(0x7f0000002540)={&(0x7f0000001540)=""/4096, 0x0, 0x1000}, 0x0) sigaltstack(&(0x7f0000000040)={0x0}, &(0x7f0000000180)={0x0}) 00:49:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 00:49:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x5, &(0x7f0000000000)=0x1, 0x4) 00:49:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) 00:49:40 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x10000000) 00:49:40 executing program 0: syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000700)=[{0x0}], 0x1000, &(0x7f0000000800)={[{@two_active_logs}], [{@uid_gt}]}) read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) 00:49:40 executing program 3: syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000004400), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000004400), 0x2c0000, 0x0) pselect6(0x40, &(0x7f0000000000)={0x20bd}, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) 00:49:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@local}]}]}, 0xfc}}, 0x0) 00:49:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x44, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@loopback, 0x0, 0x1}]}]}, 0xfc}}, 0x0) 00:49:40 executing program 5: syz_mount_image$f2fs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) 00:49:40 executing program 2: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}}}}) [ 181.657193][ T3905] fuse: Bad value for 'fd' 00:49:40 executing program 3: add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000140)="a2", 0x1, 0xfffffffffffffffb) 00:49:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x14, 0x0, 0x605}, 0x14}}, 0x0) 00:49:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x1a, &(0x7f0000000000), 0x4) 00:49:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {0x3}, {}]}) 00:49:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000), 0x4) 00:49:41 executing program 2: gettid() syz_clone(0x18800000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="8a") 00:49:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x104, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x0, @in6=@local}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6=@local}, {{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@loopback, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x1}]}]}, 0x1bc}}, 0x0) 00:49:41 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$unlink(0x9, r0, r1) 00:49:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x29, 0x48, 0x0, 0x4) 00:49:41 executing program 0: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x3]}, 0x8}) 00:49:41 executing program 1: timer_create(0x0, 0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000001400)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000001440)={{0x0, 0x3938700}, {0x0, r0+60000000}}, 0x0) 00:49:41 executing program 3: add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 00:49:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000000), 0x4) 00:49:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', 0x0}) 00:49:41 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000006bc0)={0x0, 0x0, &(0x7f0000006b80)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01"], 0x34}}, 0x0) 00:49:41 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}) 00:49:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 00:49:41 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000006bc0)={&(0x7f0000006ac0), 0xc, &(0x7f0000006b80)={&(0x7f0000006b00)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {}, @device_b}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}]}, 0x34}}, 0x0) 00:49:41 executing program 0: clock_gettime(0xa1b8b82120c842f1, 0x0) 00:49:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x35, &(0x7f0000000000), 0x4) [ 182.191092][ T3950] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. 00:49:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 00:49:41 executing program 3: socket$inet_tcp(0x10, 0x1, 0xb) 00:49:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x2061, &(0x7f0000005180)) 00:49:41 executing program 0: r0 = getpid() process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x18a, &(0x7f0000000340)=[{&(0x7f0000000200)=""/189, 0x200005fd}, {0x0}], 0x2, 0x0) 00:49:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x29, 0x21, 0x0, 0x4) 00:49:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0x10, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x84, 0x5, [{{@in=@multicast1}, 0x0, @in6=@local}, {{@in6=@private0}, 0x0, @in=@loopback}]}]}, 0x13c}}, 0x0) [ 182.353849][ T3960] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 00:49:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc000000190001000000000000000000ff020000000000000000000000000001ffffffff00fe0000000000000000000000000000000000000a"], 0xfc}}, 0x0) 00:49:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 00:49:41 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x37fe0}}, 0x0) 00:49:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast1}, {@remote}, {@dev}, {@multicast2}, {@multicast1}]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@loopback}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@remote}, {@multicast2}, {@dev}]}, @ra={0x94, 0x4}, @noop]}}}}}) 00:49:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x104, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x0, @in6=@local}, {{@in=@multicast1, 0x0, 0x32}, 0x2, @in6=@local, 0x0, 0x4}, {{@in6=@private0, 0x0, 0x3c}, 0x2, @in=@loopback, 0x0, 0x1}, {{@in6=@loopback}, 0x0, @in6=@mcast1, 0x0, 0x1}]}]}, 0x1bc}}, 0x0) [ 182.504104][ T3972] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.531834][ T3974] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 00:49:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xd, 0x0, &(0x7f0000000040)=0x4) 00:49:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000000)=0x7, 0x4) 00:49:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x0, 0x0, 0x7}, 0x48) 00:49:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) [ 182.711494][ T3983] TCP: TCP_TX_DELAY enabled [ 182.800799][ T3987] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 00:49:42 executing program 0: syz_usb_connect(0x0, 0x31, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc4, 0xce, 0x68, 0x8, 0x2b73, 0x17, 0x1d3c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x1, 0xff, 0x4c, 0xa0, 0x0, [], [{{0x9, 0x5, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}]}}]}}]}}, 0x0) 00:49:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)={0x14, r1, 0x2af108834fa05f57, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) 00:49:42 executing program 3: add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000002200)="7f5f", 0x2, 0xfffffffffffffffc) 00:49:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x3c, &(0x7f0000000000), 0x4) 00:49:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 00:49:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 00:49:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x29, 0x36, 0x0, 0x0) 00:49:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x6, &(0x7f0000000000), 0x4) 00:49:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x25}]}) [ 183.415397][ T3997] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 00:49:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1d}, {}]}) 00:49:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) 00:49:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0xd, &(0x7f0000000000)=0x1, 0x4) [ 183.792863][ T3680] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 184.043009][ T3680] usb 1-1: Using ep0 maxpacket: 8 [ 184.163060][ T3680] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0xE has invalid wMaxPacketSize 0 [ 184.184519][ T3680] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.363030][ T3680] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=1d.3c [ 184.384385][ T3680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.392392][ T3680] usb 1-1: Product: syz [ 184.466360][ T3680] usb 1-1: Manufacturer: syz [ 184.470988][ T3680] usb 1-1: SerialNumber: syz [ 184.535192][ T3680] usb 1-1: config 0 descriptor?? [ 184.854702][ T3680] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 184.895821][ T3680] usb 1-1: USB disconnect, device number 2 00:49:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x15, &(0x7f0000000000), 0x4) 00:49:44 executing program 1: clock_nanosleep(0x0, 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 00:49:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000000)=0x2c, 0x4) 00:49:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x44, 0x803, [{{@in=@multicast1}, 0x0, @in6=@local}]}]}, 0xfc}}, 0x0) 00:49:44 executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:49:44 executing program 3: r0 = socket(0x11, 0x3, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) 00:49:44 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)='\xf2\x8d[\xc3>\x8f\x1f\v\xa4\xcb\xf8=\xbd/\xa4\xd8\xd7/doj\xfe\x13J+\xcb\x9e\xb1S\x8f\xb3\x0e\x05\x16\xf5\xfdUR\xa6\x10\xb2\x80\xad`\xa2\xd5v\xc4\xbb%\xa9h\xfb\xdc\xdf\xb1\xa5/\\Z\xa0\xee\xfd\x7f\xf8Wc\xe5\xee\xa1\x9b!\xaa\xbf\xd0\x10\x9bx?\f\xe9o;\x12\xba\xfa\xbdl)\xc0\xd0Bsr\xcf\xd3r\xd7\xc5\x93>K\xb1\x0fa\x1c\x7fQ\x01\xbb\xbe)J{\xd9{.Y\xab\\\xcc\xba^so\f\xa5kW\x9b\xde.~\nO^\xe9U\xd4N\xdf\x81\x8a\x1bd\xa1\xcfu\xec\x98\xa6\x8c\xd9\xaa\xe1\xd9^c\x13\xfe\xef\x0fp\x84\x05$-\xefNq\xf3:\x1a\x88\x0f|\xae\x8f\x82!\r\x9eR\xcf_\x01y\xdey\xc7T\x85\xf8\b\xd4\x8c\x84\xe3@\x1d\xfa?yo\xa0M\x91\xd0p#\xcd]{n\xdf\xf4< \xa1e\xa4`\xe8\xa6V \xb3o)') 00:49:44 executing program 0: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), 0xfffffffffffffd64) 00:49:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8917, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) [ 185.330953][ T25] kauditd_printk_skb: 23 callbacks suppressed [ 185.330968][ T25] audit: type=1400 audit(1647910184.536:136): avc: denied { accept } for pid=4023 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 00:49:44 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) 00:49:44 executing program 4: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f1bbb8", 0xc, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 00:49:44 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}, 0x7ffffff7) 00:49:44 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, &(0x7f0000000080)={0x6}, &(0x7f0000000100)={r0}, 0x0) 00:49:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x29, 0x16, 0x0, 0x4) 00:49:44 executing program 5: r0 = socket(0x11, 0x2, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 00:49:44 executing program 4: shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffa000/0x1000)=nil) [ 185.581372][ T25] audit: type=1400 audit(1647910184.786:137): avc: denied { write } for pid=4041 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 00:49:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x40049409, 0x0) 00:49:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "b786e1", 0x1}) 00:49:44 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x63, 0x0) mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 185.659800][ T25] audit: type=1400 audit(1647910184.836:138): avc: denied { getopt } for pid=4048 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 00:49:44 executing program 5: syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x900, &(0x7f0000000300)) 00:49:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_pts(r0, 0x200000) 00:49:45 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x12, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x5}]}, 0x18}}, 0x0) 00:49:45 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5429) 00:49:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) [ 185.832507][ T25] audit: type=1400 audit(1647910185.036:139): avc: denied { mount } for pid=4061 comm="syz-executor.5" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 00:49:45 executing program 3: socketpair(0xa, 0x2, 0x0, &(0x7f0000000480)) 00:49:45 executing program 5: socket$inet(0x2, 0xa, 0x0) pselect6(0x40, &(0x7f0000000140)={0x8}, 0x0, 0x0, 0x0, 0x0) 00:49:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, 0xffffff38, &(0x7f0000000100)=[{&(0x7f0000000040)="0d9f386470a414d6d00a7a62be1f85a48f58d93160a997fb8dceeb09c76c0d66651258a8403a030000000000000097feee4f08e5fa161f95edcd290fe1b8f7640374e3279db4da1ffba7807bd2b84ec02e2906fced3b6bbf5f5d7821efaeca0566f999325681cf23af8ec68702e802f8dad705fa4e665a16e8b8cce9afa8ce8c3b1cb4296af56630b52a22267e4cb7c64ebaf117782926e848f61814e1d3eb", 0x9f}], 0x1}, 0x20) 00:49:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f00000003c0)=""/197, 0x26, 0xc5, 0x1}, 0x20) [ 185.945345][ T25] audit: type=1400 audit(1647910185.036:140): avc: denied { write } for pid=4063 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 00:49:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}, 0x0) [ 186.026898][ T25] audit: type=1400 audit(1647910185.116:141): avc: denied { unmount } for pid=3627 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.121437][ T25] audit: type=1400 audit(1647910185.186:142): avc: denied { append } for pid=2948 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.153266][ T25] audit: type=1400 audit(1647910185.186:143): avc: denied { open } for pid=2948 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.184702][ T25] audit: type=1400 audit(1647910185.186:144): avc: denied { getattr } for pid=2948 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 00:49:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2001, 0x0) 00:49:45 executing program 2: socketpair(0x2, 0x3, 0x1, &(0x7f0000000480)) 00:49:45 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 00:49:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0xf}, 0x0) 00:49:45 executing program 3: syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@random="1734a0f0bab7", @local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "42c453", 0x0, 0x0, 0x0, @mcast1, @private1}}}}, 0x0) 00:49:45 executing program 4: syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]}) 00:49:45 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x545c) 00:49:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x2000004c, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0xfffffffffffffe70}}, 0x0) 00:49:46 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) read$usbmon(r0, 0x0, 0x0) 00:49:46 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 00:49:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6}, 0x48) 00:49:46 executing program 4: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2}}) 00:49:46 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty, 0xf7f}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x933}}, @dstopts={{0x18}}], 0x30}, 0x11) 00:49:46 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5413) 00:49:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) 00:49:46 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x16, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bbc, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@private2}}]}, 0x50}}, 0x0) 00:49:46 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5423) 00:49:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[], 0x888}}, 0x0) [ 187.007904][ T25] audit: type=1400 audit(1647910186.216:145): avc: denied { create } for pid=4105 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 187.009269][ T4108] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4108 comm=syz-executor.1 00:49:46 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x545c) 00:49:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x540b) 00:49:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000240)={@multicast1, @empty}, 0xc) 00:49:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x5460, 0x0) 00:49:46 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x5, 0x2}, 0x10}}, 0x0) 00:49:46 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 00:49:46 executing program 2: epoll_create1(0xcb6484cadd79725d) 00:49:46 executing program 1: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:49:46 executing program 0: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) 00:49:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5437, 0x0) 00:49:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x19}, 0x48) 00:49:46 executing program 2: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000700)) [ 187.803341][ T3680] Bluetooth: hci0: command 0x0401 tx timeout 00:49:47 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x545c) 00:49:47 executing program 0: socketpair(0x2, 0x2, 0x1, &(0x7f0000000480)) 00:49:47 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x2}]}) 00:49:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0xc020660b, 0x0) 00:49:47 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x38}}, 0x0) 00:49:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x933}}], 0x18}, 0x0) 00:49:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 00:49:47 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001e00)={0x8, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0}}, 0x120) 00:49:47 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x17, 0x0, 0x0, &(0x7f00000003c0)=[@flowinfo={{0x14}}], 0x18}, 0x0) 00:49:47 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x10000100, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) 00:49:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 00:49:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x200}, &(0x7f00000000c0)={0x8}, 0x0, 0x0) 00:49:48 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x105140, 0x0) 00:49:48 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 00:49:48 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x545c) 00:49:48 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5425) 00:49:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000100)=""/179, 0x27, 0xb3, 0x802}, 0x20) 00:49:48 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000000180), 0x48) 00:49:48 executing program 5: fsopen(&(0x7f0000000040)='cpuset\x00', 0x0) 00:49:48 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@flowinfo={{0x14, 0x11}}], 0x18}, 0x0) 00:49:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x0, 0x0, "ad886be1ba8a17b15e0b5f2b98ae89a6c886882a753f3bb5210853c288dd3919c5dfbfc0b6287ae4c12ee5cb301002fa3bb6259bfe210d0936b0d082c166c422", "307f425a121d5c4383274fee0d37b611d52626ef10a2d824fc828646ddca5598"}) 00:49:48 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 00:49:48 executing program 4: socketpair(0x2, 0x2, 0x88, &(0x7f0000000480)) 00:49:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7}, 0x48) 00:49:48 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], &(0x7f00000001c0)=""/134, 0x27, 0x86, 0x1}, 0x20) 00:49:48 executing program 1: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) 00:49:49 executing program 2: syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x45, &(0x7f0000000300)) 00:49:49 executing program 4: r0 = socket(0xa, 0x80003, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none}, 0xa) 00:49:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f00000000c0)) 00:49:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x12, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x7, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@dev, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x98}}, 0x0) 00:49:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5428, 0x0) [ 190.395990][ T25] kauditd_printk_skb: 9 callbacks suppressed [ 190.396005][ T25] audit: type=1400 audit(1647910189.606:155): avc: denied { bind } for pid=4243 comm="syz-executor.4" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.433517][ T4246] ======================================================= 00:49:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x541b, 0x0) [ 190.433517][ T4246] WARNING: The mand mount option has been deprecated and [ 190.433517][ T4246] and is ignored by this kernel. Remove the mand [ 190.433517][ T4246] option from the mount to silence this warning. [ 190.433517][ T4246] ======================================================= 00:49:49 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x80045440) 00:49:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x40305828, 0x0) 00:49:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}, 0x80fe) 00:49:49 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x6900, 0x0) 00:49:49 executing program 3: syz_clone(0xf0089580, 0x0, 0x0, 0x0, 0x0, 0x0) 00:49:49 executing program 4: syz_clone3(&(0x7f0000000400)={0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0, {}, &(0x7f0000000300)=""/86, 0x56, &(0x7f0000000380)=""/37, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000680), &(0x7f00000006c0)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001100)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000f80)=@raw=[@call, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, @generic={0x0, 0xe, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001080)={0x3}, 0x10}, 0x80) 00:49:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@dev, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x50}, 0x300}, 0x0) 00:49:49 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x80045440) 00:49:49 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5412) 00:49:49 executing program 0: syz_emit_ethernet(0x116, &(0x7f0000000280)=ANY=[@ANYBLOB="1734a0f0bab7aaaaaaaaaaaa86dd6042c45300e006fefc010000000000000000000000000000fc"], 0x0) 00:49:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:49:50 executing program 0: syz_emit_ethernet(0x116, &(0x7f0000000280)=ANY=[@ANYBLOB="1734a0f0bab7aaaaaaaaaaaa86dd6042c45300e006fefc010000000000000000000000000000fc"], 0x0) 00:49:50 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000800)={0x0, 0x0, 0x189d, 0x0, 0x0, "81b2549be864fe0c1e1c14bd58d17fbbc09eef"}) 00:49:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x80045440) 00:49:50 executing program 2: syz_clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_clone3(&(0x7f0000000cc0)={0x100001000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:49:50 executing program 5: syz_clone(0x80021400, 0x0, 0x52, 0x0, 0x0, 0x0) 00:49:50 executing program 3: mount$fuseblk(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 00:49:50 executing program 0: syz_emit_ethernet(0x116, &(0x7f0000000280)=ANY=[@ANYBLOB="1734a0f0bab7aaaaaaaaaaaa86dd6042c45300e006fefc010000000000000000000000000000fc"], 0x0) 00:49:50 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4}}, {0x2, &(0x7f00000004c0)=@string={0x2}}]}) 00:49:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x80045440) 00:49:50 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)={0x0, 0x0, 0x4}, 0x10) 00:49:50 executing program 2: syz_usb_connect$uac1(0x0, 0x7a, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x3, {0x7, 0x25, 0x1, 0x0, 0x0, 0x800}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000440)=@string={0x2}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000580)=@string={0x4, 0x3, "7dc2"}}, {0x0, 0x0}]}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) 00:49:50 executing program 0: syz_emit_ethernet(0x116, &(0x7f0000000280)=ANY=[@ANYBLOB="1734a0f0bab7aaaaaaaaaaaa86dd6042c45300e006fefc010000000000000000000000000000fc"], 0x0) 00:49:50 executing program 5: eventfd(0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_submit(r0, 0x2, &(0x7f0000001380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000200)="a347f0a674a7", 0x6}]) 00:49:50 executing program 1: syz_clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:49:50 executing program 3: syz_clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000380)=""/37, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) 00:49:50 executing program 0: write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) [ 191.312652][ T25] audit: type=1400 audit(1647910190.516:156): avc: denied { create } for pid=4301 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 00:49:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 191.359290][ T25] audit: type=1400 audit(1647910190.526:157): avc: denied { read } for pid=4301 comm="syz-executor.5" path="socket:[33924]" dev="sockfs" ino=33924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 00:49:50 executing program 0: r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={0x0, 0xe}}, 0x0) 00:49:50 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x242000) execveat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) [ 191.472862][ T3680] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 191.632869][ T918] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 191.723087][ T3680] usb 5-1: Using ep0 maxpacket: 16 [ 191.842916][ T3680] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 192.014811][ T3680] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 192.024198][ T918] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 192.033022][ T918] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 192.043779][ T3680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.051869][ T3680] usb 5-1: Product: syz [ 192.056525][ T918] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.065752][ T3680] usb 5-1: SerialNumber: syz [ 192.117413][ T918] usb 3-1: language id specifier not provided by device, defaulting to English [ 192.318864][ T3680] usb 5-1: USB disconnect, device number 2 [ 192.442952][ T918] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.452022][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.460513][ T918] usb 3-1: Product: 쉽 [ 192.465171][ T918] usb 3-1: Manufacturer: ᐌ [ 192.786233][ T918] usb 3-1: 0:2 : does not exist 00:49:52 executing program 4: syz_clone3(&(0x7f0000000400)={0x0, &(0x7f0000000240), 0x0, 0x0, {}, &(0x7f0000000300)=""/86, 0x56, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 00:49:52 executing program 0: mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) 00:49:52 executing program 3: syz_clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000300)=""/86, 0x56, 0x0, 0x0}, 0x58) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000680), &(0x7f00000006c0)=0x4) [ 192.807029][ T918] usb 3-1: USB disconnect, device number 2 [ 192.869363][ T3731] udevd[3731]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 00:49:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 00:49:52 executing program 5: getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_KEEPCAPS(0x7) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000280)={0x0, 0x100, 0x0, 0x0, 0x0, 0x272}) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x81}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x100, 0x0, 0x4, 0x2, 0x8, 0x3}, 0x12, &(0x7f0000000380)={0x5, 0xf, 0x12, 0x3, [@generic={0x3, 0x10, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x3, 0x2}]}, 0x4, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x2, &(0x7f00000004c0)=@string={0x2}}, {0x0, 0x0}]}) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000ec0), 0x4) syz_open_dev$hiddev(&(0x7f0000000f00), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:49:52 executing program 1: syz_clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) 00:49:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r1, r2) 00:49:52 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) 00:49:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) [ 193.264552][ T25] audit: type=1400 audit(1647910192.476:158): avc: denied { bind } for pid=4329 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 00:49:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) 00:49:52 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 00:49:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) 00:49:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) 00:49:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r1, r2) 00:49:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r1, r2) 00:49:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x0) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) dup2(r1, r2) [ 193.593062][ T3674] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 193.883608][ T3674] usb 6-1: Using ep0 maxpacket: 16 [ 193.889667][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.896023][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.113038][ T3674] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 194.533063][ T3674] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 194.542386][ T3674] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.573125][ T4334] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 194.806946][ T918] usb 6-1: USB disconnect, device number 2 00:49:54 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/208, 0x1a, 0xd0, 0x1}, 0x20) 00:49:54 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, 0x0) 00:49:54 executing program 3: syz_clone3(&(0x7f0000000cc0)={0x100001000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:49:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r1, r2) 00:49:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r1, r2) 00:49:54 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0xffffffffffffffff}, 0xc) 00:49:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 00:49:54 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x81, &(0x7f0000000100)=""/129, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:49:54 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000080)=""/208, 0x26, 0xd0, 0x1}, 0x20) 00:49:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000080)=@framed={{}, [@func, @cb_func]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x81, &(0x7f0000000100)=""/129, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:49:54 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x0) 00:49:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r1, r2) 00:49:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) read(r3, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r1, r2) 00:49:54 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x402, 0x0) 00:49:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000000c0)='\n', 0x1}], 0x2}, 0x0) 00:49:54 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)={0x0, 0x0, 0x18}, 0x10) 00:49:54 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 00:49:54 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40002021) 00:49:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x0, 0x0, 0x5}, 0x48) 00:49:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 00:49:54 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x9, 0x2, &(0x7f00000002c0)=@raw=[@map_fd], &(0x7f0000000300)='GPL\x00', 0x5, 0x1000, &(0x7f0000000340)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:49:54 executing program 3: bpf$OBJ_PIN_MAP(0xb, 0x0, 0x0) 00:49:55 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:49:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}, 0x1) 00:49:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) 00:49:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x400, 0xa4, &(0x7f0000000100)=""/164, 0x40f00, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x7, 0x8, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x1, &(0x7f0000000bc0)=@raw=[@exit], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:49:55 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x102a0}, 0x80) 00:49:55 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8) 00:49:55 executing program 2: bpf$OBJ_PIN_MAP(0x1e, 0x0, 0x0) 00:49:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x8, 0x3}, 0x48) 00:49:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x1, &(0x7f0000000bc0)=@raw=[@exit], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:49:55 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af25, &(0x7f0000001500)) 00:49:55 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000011c0)={0x3, &(0x7f0000001180)=[{}, {}, {0x3a11}]}) 00:49:55 executing program 2: getpriority(0x7273f3aa0f31c712, 0x0) [ 196.003680][ T25] audit: type=1400 audit(1647910195.216:159): avc: denied { map_read map_write } for pid=4431 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 00:49:55 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x80) 00:49:55 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 00:49:55 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) 00:49:55 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:49:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{}, {0x0, @remote}, 0x8, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:49:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e19b) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 00:49:55 executing program 2: io_setup(0x2, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7fffffff]}, 0x8}) 00:49:55 executing program 1: pselect6(0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 00:49:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x560a, &(0x7f0000000000)={0x0, 0xfffffffd, 0x4d2cebbe, 0x0, 0x0, "f6328beb00980b2584b6ba37f92d4fe7710f5d"}) 00:49:55 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:49:55 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x40086602, 0x0) 00:49:55 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x2, &(0x7f0000001500)) 00:49:55 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000100)={@host}) 00:49:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) [ 196.364416][ T25] audit: type=1400 audit(1647910195.576:160): avc: denied { read } for pid=4451 comm="syz-executor.4" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 00:49:55 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)) 00:49:55 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0xc0189436, 0x0) 00:49:55 executing program 1: io_setup(0x7ff, &(0x7f0000000040)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) [ 196.468104][ T25] audit: type=1400 audit(1647910195.576:161): avc: denied { open } for pid=4451 comm="syz-executor.4" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 196.570469][ T25] audit: type=1400 audit(1647910195.596:162): avc: denied { create } for pid=4462 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 196.597557][ T25] audit: type=1400 audit(1647910195.606:163): avc: denied { ioctl } for pid=4462 comm="syz-executor.5" path="socket:[34163]" dev="sockfs" ino=34163 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 196.658229][ T25] audit: type=1400 audit(1647910195.616:164): avc: denied { create } for pid=4451 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 196.696308][ T25] audit: type=1400 audit(1647910195.616:165): avc: denied { bind } for pid=4451 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 196.752912][ T25] audit: type=1400 audit(1647910195.616:166): avc: denied { accept } for pid=4451 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 196.782877][ T25] audit: type=1400 audit(1647910195.616:167): avc: denied { read } for pid=4451 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 196.812923][ T25] audit: type=1400 audit(1647910195.766:168): avc: denied { create } for pid=4474 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 00:49:56 executing program 0: io_setup(0xffff, &(0x7f0000000000)) io_pgetevents(0x0, 0x0, 0x4, &(0x7f0000000280)=[{}, {}, {}, {}], &(0x7f0000000100), &(0x7f0000000400)={0x0}) 00:49:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002088ff"], 0x24}}, 0x0) 00:49:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000340)=0x3ff, 0x4) 00:49:56 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000100)) 00:49:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x300}}) 00:49:56 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0xc0045878, 0x0) 00:49:56 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001500)) 00:49:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x183201}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000f8f83e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x30}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x208002, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0xffffffffffffffff, 0x0, 0x1, 0x0, 0x200000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x183201}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @ioapic={0xf000, 0x2, 0xb018, 0x5, 0x0, [{0x0, 0xff}, {0xff, 0x0, 0x1, '\x00', 0x8}, {0x2}, {0x81, 0x2, 0x7f, '\x00', 0x6}, {0x5, 0x6, 0x5, '\x00', 0xf9}, {0x7, 0x3, 0x18, '\x00', 0x6}, {0x1f, 0x7, 0x0, '\x00', 0x5}, {0x7e, 0xff, 0x3f, '\x00', 0x9}, {0x0, 0x1, 0x3, '\x00', 0x20}, {0x7d, 0x2, 0x4, '\x00', 0xbc}, {0x2, 0x6, 0x9, '\x00', 0x1}, {0x40, 0x3, 0x0, '\x00', 0x88}, {0x44, 0x6f, 0x80}, {0x76, 0x0, 0x1c, '\x00', 0x9}, {0x6, 0x7, 0x3f, '\x00', 0xfb}, {0x7, 0x31, 0xc8, '\x00', 0x9}, {0x1, 0x9, 0x12}, {0x80, 0x5, 0x9, '\x00', 0x9e}, {0xff, 0x7f, 0x5, '\x00', 0x80}, {0xff, 0x40, 0x7f, '\x00', 0x9}, {0x0, 0x9, 0x5, '\x00', 0x43}, {0x5, 0x3, 0x9, '\x00', 0x8}, {0x1, 0x3f, 0x1e, '\x00', 0x86}, {0x4, 0x6, 0x5, '\x00', 0x6}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:56 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5451, 0x0) 00:49:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x2, &(0x7f0000000180)=@raw=[@map_idx_val], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 00:49:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e19b) syz_open_dev$audion(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$vcsn(&(0x7f0000001380), 0x0, 0x10901) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001080)}}, {{0x0, 0x0, &(0x7f0000001640)}}], 0x3, 0x8804) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 00:49:56 executing program 0: r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_setup(0x9, &(0x7f0000000100)=0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_submit(r1, 0x2, &(0x7f0000001380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r0}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000200)="a347f0a674a7fe28fc2a53650190ee9b", 0x10}]) 00:49:56 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 197.328708][ T4497] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 00:49:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) [ 197.511444][ T4497] kvm: pic: single mode not supported 00:49:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4020940d, 0x0) [ 197.511621][ T4497] kvm: pic: single mode not supported [ 197.511785][ T4497] kvm: pic: single mode not supported [ 197.511900][ T4497] kvm: pic: level sensitive irq not supported [ 197.616275][ T4497] kvm: pic: level sensitive irq not supported [ 197.616358][ T4497] kvm: pic: single mode not supported 00:49:57 executing program 4: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$damon_target_ids(r0, 0x0, 0x0) 00:49:57 executing program 2: memfd_create(&(0x7f00000000c0)='^@!\x00', 0x6) 00:49:57 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)=[{0x0}], 0x1}, 0x0) 00:49:57 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5452, &(0x7f0000001500)) [ 197.616370][ T4497] kvm: pic: level sensitive irq not supported [ 197.956264][ T4497] kvm: pic: single mode not supported [ 197.962877][ T4497] kvm: pic: level sensitive irq not supported [ 198.014637][ T4497] kvm: pic: single mode not supported [ 198.040993][ T4497] kvm: pic: single mode not supported [ 198.046748][ T4497] kvm: pic: level sensitive irq not supported [ 198.088169][ T4497] kvm: pic: single mode not supported [ 198.123463][ T4497] kvm: pic: single mode not supported [ 198.128865][ T4497] kvm: pic: level sensitive irq not supported [ 198.174704][ T4497] kvm: pic: single mode not supported 00:49:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000f8f83e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x30}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x208002, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0xffffffffffffffff, 0x0, 0x1, 0x0, 0x200000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x183201}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @ioapic={0xf000, 0x2, 0xb018, 0x5, 0x0, [{0x0, 0xff}, {0xff, 0x0, 0x1, '\x00', 0x8}, {0x2}, {0x81, 0x2, 0x7f, '\x00', 0x6}, {0x5, 0x6, 0x5, '\x00', 0xf9}, {0x7, 0x3, 0x18, '\x00', 0x6}, {0x1f, 0x7, 0x0, '\x00', 0x5}, {0x7e, 0xff, 0x3f, '\x00', 0x9}, {0x0, 0x1, 0x3, '\x00', 0x20}, {0x7d, 0x2, 0x4, '\x00', 0xbc}, {0x2, 0x6, 0x9, '\x00', 0x1}, {0x40, 0x3, 0x0, '\x00', 0x88}, {0x44, 0x6f, 0x80}, {0x76, 0x0, 0x1c, '\x00', 0x9}, {0x6, 0x7, 0x3f, '\x00', 0xfb}, {0x7, 0x31, 0xc8, '\x00', 0x9}, {0x1, 0x9, 0x12}, {0x80, 0x5, 0x9, '\x00', 0x9e}, {0xff, 0x7f, 0x5, '\x00', 0x80}, {0xff, 0x40, 0x7f, '\x00', 0x9}, {0x0, 0x9, 0x5, '\x00', 0x43}, {0x5, 0x3, 0x9, '\x00', 0x8}, {0x1, 0x3f, 0x1e, '\x00', 0x86}, {0x4, 0x6, 0x5, '\x00', 0x6}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e19b) syz_open_dev$audion(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$vcsn(&(0x7f0000001380), 0x0, 0x10901) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001080)}}, {{0x0, 0x0, &(0x7f0000001640)}}], 0x3, 0x8804) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 00:49:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="65f20f23710f01c5dd654566b9e80200000f323e3ef20f58466c0f7955cdbaf80c66b89c75318566efbafc0c66b8ab85000066ef0f01c80f01c33e0f01c4", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[], 0x4, 0x42850}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:57 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 00:49:57 executing program 0: io_setup(0x0, 0x0) io_setup(0xffff, &(0x7f0000000000)) io_pgetevents(0x0, 0x45, 0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100), &(0x7f0000000400)={0x0}) 00:49:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, 0xfffffffffffffffc) 00:49:57 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000080)) 00:49:57 executing program 4: io_setup(0xffff, &(0x7f0000000000)) io_pgetevents(0x0, 0x45, 0x6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) 00:49:57 executing program 5: syz_init_net_socket$ax25(0x3, 0x0, 0x5000000) 00:49:57 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x5421, 0x0) 00:49:57 executing program 0: memfd_create(&(0x7f0000000040)='/dev/vhost-vsock\x00', 0x5) [ 198.180805][ T4497] kvm: pic: level sensitive irq not supported 00:49:57 executing program 2: ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000000)) io_setup(0x0, &(0x7f0000000300)) [ 198.515131][ T4540] kvm: pic: level sensitive irq not supported [ 198.693594][ T4540] kvm: pic: level sensitive irq not supported 00:49:58 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x891c, 0x0) 00:49:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000f8f83e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x30}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x208002, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x1, 0x0, 0x200000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x183201}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @ioapic={0xf000, 0x0, 0xb018, 0x5, 0x0, [{0x23, 0xff, 0x81, '\x00', 0x7}, {0xff, 0x89, 0x1, '\x00', 0x8}, {0x2, 0x5, 0x0, '\x00', 0x9}, {0x81, 0x2, 0x7f, '\x00', 0x6}, {0x5, 0x6, 0x5, '\x00', 0xf9}, {0x7, 0x3, 0x18, '\x00', 0x6}, {0x1f, 0x7, 0x0, '\x00', 0x5}, {0x7e, 0xff, 0x3f, '\x00', 0x9}, {0x0, 0x1, 0x3, '\x00', 0x20}, {0x7d, 0x2, 0x4}, {0x2, 0x6, 0x9, '\x00', 0x1}, {0x40, 0x3, 0x0, '\x00', 0x88}, {0x44, 0x6f, 0x80}, {0x76, 0x0, 0x1c, '\x00', 0x9}, {0x6, 0x7, 0x3f, '\x00', 0xfb}, {0x7, 0x31, 0xc8, '\x00', 0x9}, {0x1, 0x9, 0x12}, {0x80, 0x5, 0x9, '\x00', 0x9e}, {0xff, 0x7f, 0x5, '\x00', 0x80}, {0xff, 0x40, 0x7f, '\x00', 0x9}, {0x0, 0x0, 0x5, '\x00', 0x43}, {0x5, 0x3, 0x9, '\x00', 0x8}, {}, {0x4}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:49:58 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 00:49:58 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$kcm(0x29, 0x5, 0x0) 00:49:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x8, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:49:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e19b) syz_open_dev$audion(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$vcsn(&(0x7f0000001380), 0x0, 0x10901) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001080)}}, {{0x0, 0x0, &(0x7f0000001640)}}], 0x3, 0x8804) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 00:49:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x8, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:49:58 executing program 2: eventfd2(0x0, 0x80800) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) 00:49:58 executing program 0: io_setup(0x7ff, 0x0) io_setup(0xffff, &(0x7f0000000000)) io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) 00:49:58 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x449e40ea0eff3ae0, 0x0) 00:49:58 executing program 2: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140), 0x10) 00:49:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x8, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:49:58 executing program 3: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x8001}, 0x0, 0x0, &(0x7f00000000c0)={0x0, r0+60000000}, 0x0) 00:49:59 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x80108907, 0x0) 00:49:59 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x8, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:49:59 executing program 3: syz_open_dev$mouse(&(0x7f0000000000), 0xa8, 0x86400) 00:49:59 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x8941, 0x0) 00:49:59 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8915, 0x0) 00:49:59 executing program 4: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x8, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:49:59 executing program 2: keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000240)={0x0}) 00:49:59 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8931, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8916, 0x0) 00:49:59 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0xc0189436, &(0x7f0000000000)={'veth0_to_team\x00', 0x80000001}) 00:49:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3}}}}, 0x30}}, 0x0) 00:49:59 executing program 4: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x8, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:49:59 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x8902, 0x0) 00:49:59 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0x4}}, 0x26) 00:49:59 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8932, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8934, 0x0) 00:49:59 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000300), 0x0, 0x624102) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) 00:49:59 executing program 4: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x8, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:49:59 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89a0, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8942, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 0: r0 = openat$mice(0xffffff9c, &(0x7f0000000740), 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x541b, 0x0) 00:49:59 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x401c5820, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8918, 0x0) 00:49:59 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x8, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:49:59 executing program 1: openat$autofs(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) 00:49:59 executing program 2: syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x86400) 00:49:59 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x894c, 0x0) 00:49:59 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8913, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8927, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x4020940d, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x8, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:49:59 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8970, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8982, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8992, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x89a1, 0x0) 00:49:59 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8919, 0x0) 00:49:59 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x8, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:49:59 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8993, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x8907, 0x0) 00:49:59 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8953, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:49:59 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89a3, &(0x7f0000000000)={'veth0_to_team\x00'}) 00:50:00 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8910, &(0x7f0000000000)={'veth0_to_team\x00', 0x80000001}) 00:50:00 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff30867622150886dd6000000000442f11ecef6221c4219775d071136f00ff010000000000000000000000000001"], 0x0) 00:50:00 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) dup3(r0, r1, 0x0) 00:50:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) 00:50:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) 00:50:00 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000003800)=[{{&(0x7f0000000000)=@abs, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/170}, {&(0x7f0000000140)=""/41}, {&(0x7f0000000180)=""/164}]}}, {{&(0x7f0000000280)=@abs, 0x0, &(0x7f0000001900)=[{&(0x7f0000000300)=""/4096}, {&(0x7f0000001300)=""/119}, {&(0x7f0000001380)=""/126}, {&(0x7f0000001400)=""/241}, {&(0x7f0000001500)=""/209}, {&(0x7f0000001600)=""/131}, {&(0x7f00000016c0)=""/222}, {&(0x7f00000017c0)=""/126}, {&(0x7f0000001840)=""/140}], 0x0, &(0x7f00000019c0)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000001a40)=@abs, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001ac0)=""/99}, {&(0x7f0000001b40)=""/60}], 0x0, &(0x7f0000001bc0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000001d00)=@abs, 0x0, &(0x7f0000003080)=[{&(0x7f0000001d80)=""/79}, {&(0x7f0000001e00)=""/4096}, {&(0x7f0000002e00)=""/218}, {&(0x7f0000002f00)=""/147}, {&(0x7f0000002fc0)=""/155}]}}, {{&(0x7f0000003100), 0x0, &(0x7f00000031c0)=[{&(0x7f0000003180)=""/14}], 0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000100"]}}, {{&(0x7f0000003280), 0x0, &(0x7f00000034c0)=[{&(0x7f0000003300)=""/180}, {&(0x7f00000033c0)=""/238}]}}, {{&(0x7f0000003500), 0x0, &(0x7f00000036c0)=[{&(0x7f0000003580)=""/71}, {&(0x7f0000003600)=""/168}], 0x0, &(0x7f0000003a80)=ANY=[@ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000101a8c1dd21bd02e3698052b930165cc753000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00']}}], 0x1, 0x12002, 0x0) 00:50:00 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) dup3(r0, r1, 0x0) 00:50:00 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x5411, 0x0) 00:50:00 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) dup3(r0, r1, 0x0) 00:50:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) 00:50:00 executing program 0: syz_clone(0x8100, &(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) socketpair(0x28, 0x0, 0x0, &(0x7f0000001b80)) syz_clone(0x40008000, &(0x7f0000000240)="cd158a087076ad62e1966d00798ed3891488917dcc3fa1ecce4d5bba4fa1b7473132c9f7fcfff807a41588ea51a2099537694d6cc9f02bc2342c783f2252bfc3e8cc8f8f92f76e417148a61721a9607ef17e3c807e40d1eeb83c", 0x5a, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="7a8f78e31c29475d1abb96c98a7fa9dd6a39020c12a4cda98c21a31fc0fedf1429cd7f99f568eff2d39de155cdd4b0273717f53787441c3840d09cea9582199e54a9c81d8e559347490964bd50cab9289859bd08bae5f838ffb0b7b8e2dd71a9cd55a74888dffd839beb514c283bb209ec3955d17a2972e3191bceb8e02898de5d931c1cad8ef81b6c266770b41027cb250f6fbc3dd567927ea7e2745cfd4d6e9864279cd4a04d61b8bd595799d9c21a3be71241361086423da7e4d508f0966f77e1e32742db8e88840e410d76ce9e0374cf024425ae285b8bf9a8f35f0b6f578e0605642db24cbffba5d051338dad56daf988b9d02a71ae9343c4a742663c") 00:50:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:50:00 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)) 00:50:00 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) dup3(r0, r1, 0x0) 00:50:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) [ 198.733697][ T4540] kvm: pic: level sensitive irq not supported [ 201.126914][ T25] kauditd_printk_skb: 12 callbacks suppressed [ 201.126931][ T25] audit: type=1400 audit(1647910200.336:181): avc: denied { create } for pid=4693 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 00:50:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:50:00 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) dup3(r0, r1, 0x0) 00:50:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="0204040000000000ffcd0100000000239ed4847595a649f4a53a"], 0x28) 00:50:00 executing program 2: syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) 00:50:00 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:50:00 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r0, 0x5460, 0x0) 00:50:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:50:00 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f0000000080)) [ 201.804302][ T25] audit: type=1400 audit(1647910201.016:182): avc: denied { read } for pid=4714 comm="syz-executor.2" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 00:50:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) 00:50:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}, 'dummy0\x00'}) 00:50:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x0, r2}) dup3(r0, r1, 0x0) 00:50:01 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f0000000080)) 00:50:01 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @random="bb2f1f8d9b78", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:50:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b63, 0x0) [ 201.991195][ T25] audit: type=1400 audit(1647910201.016:183): avc: denied { ioctl } for pid=4716 comm="syz-executor.5" path="cgroup:[4026532853]" dev="nsfs" ino=4026532853 ioctlcmd=0x5460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 00:50:01 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:50:01 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x200000000) dup3(r0, r1, 0x0) 00:50:01 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/hci\x00') 00:50:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x0, r2}) dup3(r0, r1, 0x0) 00:50:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 202.110073][ T25] audit: type=1400 audit(1647910201.036:184): avc: denied { open } for pid=4714 comm="syz-executor.2" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 00:50:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:50:01 executing program 0: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x43f318bf0102e84d) 00:50:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000a40)={0x4c, 0x0, &(0x7f0000000080)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f0000000940)="1c"}) [ 202.272370][ T25] audit: type=1400 audit(1647910201.456:185): avc: denied { read } for pid=4744 comm="syz-executor.5" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 00:50:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x0, r2}) dup3(r0, r1, 0x0) 00:50:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:50:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f00000029c0)) [ 202.408461][ T25] audit: type=1400 audit(1647910201.456:186): avc: denied { open } for pid=4744 comm="syz-executor.5" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 202.443600][ T4759] binder: 4758:4759 ioctl c0306201 20000a40 returned -14 00:50:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x0, r2}) dup3(r0, r1, 0x0) 00:50:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x38, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08631040"], 0x0, 0x0, 0x0}) 00:50:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:50:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b41, 0x0) [ 202.530804][ T4764] loop2: detected capacity change from 0 to 512 [ 202.551551][ T25] audit: type=1400 audit(1647910201.456:187): avc: denied { ioctl } for pid=4744 comm="syz-executor.5" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 202.590965][ T4767] binder: 4765:4767 unknown command 0 [ 202.613846][ T4767] binder: 4765:4767 ioctl c0306201 20000200 returned -22 00:50:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 202.648539][ T25] audit: type=1400 audit(1647910201.476:188): avc: denied { set_context_mgr } for pid=4744 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 00:50:01 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0x2) [ 202.709328][ T4764] EXT4-fs error (device loop2): __ext4_fill_super:5277: inode #2: comm syz-executor.2: iget: root inode unallocated 00:50:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0x80}}, 0x0) 00:50:02 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:50:02 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f0000000080)) 00:50:02 executing program 3: syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') [ 202.762011][ T25] audit: type=1400 audit(1647910201.616:189): avc: denied { write } for pid=4753 comm="syz-executor.0" name="card0" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 00:50:02 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) dup3(r0, r1, 0x0) [ 202.845652][ T25] audit: type=1400 audit(1647910201.616:190): avc: denied { open } for pid=4753 comm="syz-executor.0" path="/dev/dri/card0" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 202.863734][ T4764] EXT4-fs (loop2): get root inode failed [ 202.953024][ T4764] EXT4-fs (loop2): mount failed [ 202.989001][ T4790] Zero length message leads to an empty skb 00:50:02 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000380)={@dev, @broadcast, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "a7e843", 0x10, 0x21, 0x0, @loopback, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "fa15bf", 0x0, "9865fa"}}}}}}}, 0x0) 00:50:02 executing program 5: mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '\xf1'}}]}}) 00:50:02 executing program 3: syz_open_dev$media(&(0x7f0000000580), 0x0, 0x0) 00:50:02 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x24) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) 00:50:02 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0x9, 0x0, 0xffffffb5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1200400}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, r3, 0x20, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000020101"], 0x24}}, 0x0) 00:50:02 executing program 1: r0 = syz_io_uring_setup(0x1fd2, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 203.107730][ T4796] 9pnet_fd: Insufficient options for proto=fd 00:50:02 executing program 3: syz_open_dev$sg(&(0x7f0000000800), 0x0, 0x28000) 00:50:02 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) syz_io_uring_complete(0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x1004, 0x0, 0x0) 00:50:02 executing program 5: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) io_uring_setup(0x101, &(0x7f0000000480)={0x0, 0xc057}) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) 00:50:02 executing program 1: r0 = syz_io_uring_setup(0x1fd2, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 203.154522][ T4795] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:50:02 executing program 2: connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) 00:50:02 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x114, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0"]}]}, 0x114}], 0x1}, 0x0) 00:50:02 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:02 executing program 5: getitimer(0x0, &(0x7f0000000880)) 00:50:02 executing program 0: syz_io_uring_setup(0x1fd2, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:50:02 executing program 4: getitimer(0x2, &(0x7f0000000880)) 00:50:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={0xfffffffffffffffd, 0x0, 0x0}, 0x0) 00:50:02 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60b5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 00:50:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) [ 203.428974][ T4820] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 203.456776][ T4822] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.3'. 00:50:02 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:02 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x24) 00:50:02 executing program 2: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:50:02 executing program 3: keyctl$set_reqkey_keyring(0x10, 0x2) 00:50:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) [ 203.626199][ T4830] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:50:02 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:02 executing program 2: syz_open_dev$media(&(0x7f0000000580), 0x0, 0x10000) 00:50:02 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000200), 0x4) 00:50:02 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) [ 203.803886][ T4843] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 203.835721][ T4844] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 203.862797][ T141] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 204.293285][ T141] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 204.523177][ T141] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 204.532243][ T141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.563895][ T141] usb 1-1: Product: syz [ 204.568088][ T141] usb 1-1: Manufacturer: syz [ 204.588641][ T141] usb 1-1: SerialNumber: syz [ 204.685323][ T141] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 204.888795][ T4828] UDC core: couldn't find an available UDC or it's busy: -16 [ 204.897548][ T4828] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 204.910165][ T141] usb 1-1: USB disconnect, device number 3 00:50:04 executing program 0: rt_sigqueueinfo(0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0xfffff0a2}) 00:50:04 executing program 2: socketpair(0x15, 0x0, 0x0, &(0x7f0000001180)) 00:50:04 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0x4020940d, &(0x7f0000000940)) 00:50:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 00:50:04 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000380)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x28}}, 0x0) 00:50:04 executing program 3: socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) [ 205.463948][ T4856] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 205.500960][ T4857] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:50:04 executing program 0: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) io_uring_setup(0x281c, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x1c7}) 00:50:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:04 executing program 4: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 00:50:04 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:04 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 00:50:04 executing program 4: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 00:50:04 executing program 0: rt_sigqueueinfo(0x0, 0x0, &(0x7f00000005c0)) 00:50:04 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0189436, &(0x7f00000000c0)) 00:50:04 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) [ 205.672542][ T4871] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:50:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c", @ANYRES32=0x0, @ANYBLOB='\b'], 0x30}}, 0x0) 00:50:05 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000002c0)) 00:50:05 executing program 4: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 00:50:05 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xf3bf, 0x1, 0x1}) 00:50:05 executing program 1: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:05 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x0, 0x3, 0x1}) 00:50:05 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) [ 205.866796][ T4886] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 205.901882][ T4889] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 00:50:05 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x108c0, 0x0) 00:50:05 executing program 5: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:05 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@overlay={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '>.gU'}}) 00:50:05 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:05 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @private0}}}, 0x7ffffffff000) 00:50:05 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 00:50:05 executing program 0: socketpair(0x10, 0x2, 0x1000b67, &(0x7f0000000000)) 00:50:05 executing program 5: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:05 executing program 3: socketpair(0x18, 0x0, 0x4, &(0x7f0000001180)) 00:50:05 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:05 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 00:50:05 executing program 0: syz_open_dev$vim2m(&(0x7f0000000840), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x204802, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) 00:50:05 executing program 2: pselect6(0x40, &(0x7f0000000440)={0x6}, &(0x7f0000000480)={0x4}, &(0x7f00000004c0), 0x0, 0x0) 00:50:05 executing program 3: inotify_init() syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x60, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x56, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x31, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x4}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x610, 0xc, 0x8, 0x8f, 0x10, 0x20}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x425}}, {0xc6, &(0x7f0000000300)=@string={0xc6, 0x3, "547bbf90a11bc56e781abd7bb5020c6f4d363db0ece5130998d7f0feda89a97822c2628a4282cb0011277eeb0dedb5bbf3bdda03cbfece6d85ce8b18de71b9f38af1f1d666259cd7ecbeb718f1d05f8d6c3fa04f8d20fb7aa923510ef51865ab8c4f137426f83611b1fbfd8128850d133aa01dfe75ddf448da49a2126594c5c6a260e615ceabcc1f34dfb865fb205e124f90d1eb2fc11a2bc879b50012169dc988a8398e33ff3f7f74bdc64e4c7c2abf4178b89ed8b7ca53463fce32e29beb5321886663"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x820}}, {0x0, 0x0}]}) 00:50:05 executing program 5: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:05 executing program 1: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:50:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) [ 206.305580][ T25] kauditd_printk_skb: 26 callbacks suppressed [ 206.305596][ T25] audit: type=1400 audit(1647910205.516:217): avc: denied { setopt } for pid=4923 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 00:50:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 00:50:05 executing program 5: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 00:50:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:50:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 00:50:05 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xf3bf, 0x1, 0x1, 0x0, 0x7f}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0xe) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x71, 0x0, {{}, 0xff}}, 0x18) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x0, 0x1, 0x2}) 00:50:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) [ 206.612932][ T3679] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 207.013434][ T3679] usb 4-1: not running at top speed; connect to a high speed hub [ 207.462885][ T3679] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 207.471954][ T3679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.480296][ T3679] usb 4-1: Product: ࠠ [ 207.484757][ T3679] usb 4-1: Manufacturer: 答邿ᮡ滅᩸箽ʵ漌㙍뀽ओ힘ﻰ觚碩숢詢艂Ë✑뮵뷳Ϛﻋ淎캅ᢋ燞훱╦힜뻬ᢷ탱赟㽬侠₍竻⎩๑ᣵꭥ侌琓ᄶﮱ臽蔨ግꀺ︝䣴䧚ኢ鑥웅悢ᗦꯎῌ斸⃻቞遏섯⬚秈µᘒ증ꢈ踹Ｓ缿뵴仆籌뼪硁麸럘及㽆㋎鯢叫蠡捦 [ 207.861782][ T3679] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 207.878896][ T3679] usb 4-1: USB disconnect, device number 2 [ 207.891479][ T3679] usblp0: removed 00:50:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0285628, &(0x7f0000000180)={0x0, 0x0, 0x2}) 00:50:07 executing program 5: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x3c4c, 0x2, 0x4}) 00:50:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 00:50:07 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x40049409, &(0x7f00000000c0)) 00:50:07 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@multiplanar_overlay={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "64d95fca"}, 0x0, 0x3, {0x0}}) 00:50:07 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c"], 0x30}}, 0x0) 00:50:07 executing program 5: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 00:50:07 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xf3bf, 0x1, 0x1, 0x0, 0x7f}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0xe) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x0, 0x0, 0x2}) 00:50:07 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @private0}}}, 0x48) 00:50:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xf3bf, 0x1, 0x1, 0x0, 0x7f}) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x2, 0x4}, 0xff}}, 0x18) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x0, 0x1, 0x2}) [ 208.420285][ T4965] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 00:50:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 00:50:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xf3bf, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x0, 0x1, 0x2}) 00:50:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 00:50:07 executing program 4: keyctl$search(0x17, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:50:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'sit0\x00', 0x0}) 00:50:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000840)={&(0x7f0000000180)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000001c0)="84f62999dabb7765dbe431acfea148490f039ce56b67bb77b47bbbdf49e71a0c595501d98e9c795138a1a3f61b40577d196c15bf33ffe6d51b38f94b3a340f3762385c829c5bada838cc7c0b98ce96b87add123ff042527ffe74169878b77cb12448b6600072ad2fb0d657e7eeab4c9ce2e3519a7240377c82ce4364ee02700c5bb7d1", 0x83}, {&(0x7f0000000280)="c714a538256192eb70191b08f99f799004f3884fe1ad5650c2d52c1c19a6aed41507e0a0ceb7a2eb9289817f7b9034b719af349248dc550a320f6c64b08b905b57faa833c8cc02e63c18d3282f0be2a7fba551a66b57e62ff0bbbee33bfa55ccacbcb992ef51a636decb6dea7f", 0x6d}, {0x0}, {&(0x7f0000000340)="01b809f58adebf59d4012637d041f5dec0f9a648bbf100314a53b9a4b883ed0a19729dcf4d074466934a4e43b8a5f2f8584bd8eb7a93ec0630fe6cd89b381124a9046e7202d7fafdb7c677070e272f6c28f2044195c93ce61b8b735f022a0e719828020c094530a3494cd37e48e841bb351425dfd1c4293dd68a422effd6a2c542bca675a973fa9375b3d16a772ae5dcfed0", 0x92}, {&(0x7f0000000400)="e76bbd19bb90239c47f7", 0xa}, {&(0x7f0000000480)="1e4e2dadda8722ac66e2f688d0d9af966de1d02e775c5e75f75be32e751c1d5ed13bc5703e189717470278b5b5ff30596db43795bf0586ed42070a8c0852ec70b3c89f20aec97ff0671376f977ede3426765742c3851cd2c74439e28", 0x5c}, {0x0}, {&(0x7f00000011c0)="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", 0xc78}, {&(0x7f0000000640)="1acf980d309d2faeb47d4c8e1c7296abc4cd5815e8b92783582016d4c6ca5470f958e0d14450a4e14f2be5e6e6ac0f7b737364d630bca1b798a7387371ded390403688399acfd2291df7d26b44b9cb8c8c0246dd2746cfd3b000e45c9acf7ec133e3dffd353634b687499e03df723f13bca7d4d2a2b0dbafba8e8ce62ff20ba1aaa103c2a5b5b07f4be517834f457b0380af4a827f0038ef7881ce8930d8500c5a5d352e211bffc9833deccd3a6f6724cc693504304ab1eb2a59c29a986d1161091b110bf73d5688eec3fe2ac5f6fd0b8f0668e37584bcad8a", 0xd9}], 0x9, &(0x7f0000000800)}, 0x4000800) 00:50:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 00:50:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 00:50:07 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:50:07 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x57e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 00:50:07 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffffc}) 00:50:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000840)={&(0x7f0000000180)={0xa, 0x4e20, 0x0, @remote, 0x8}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000001c0)="84f62999dabb7765dbe431acfea148490f039ce56b67bb77b47bbbdf49e71a0c595501d98e9c795138a1a3f61b40577d196c15bf33ffe6d51b38f94b3a340f3762385c829c5bada838cc7c0b98ce96b87add123ff042527ffe74169878b77cb12448b6600072ad2fb0d657e7eeab4c9ce2e3519a7240377c82ce4364ee02700c5bb7d191bd28d73cfd37f28ea47abe3d0d029b8c95cb15322c9659bcb21bd82ca4a4d3", 0xa3}, {&(0x7f0000000280)="c714a538256192eb70191b08f99f799004f3884fe1ad5650c2d52c1c19a6aed41507e0a0ceb7a2eb9289817f7b9034b719af349248dc550a320f6c64b08b905b57faa833c8cc02e63c18d3282f0be2a7fba551a66b57e62ff0bbbee33bfa55ccacbcb992ef51a636decb6dea7f2f", 0x6e}, {&(0x7f0000000300)="485612e85523bca951ec6b11442df6c438e0b9293ea08f5ac5f30fca897fb8", 0x1f}, {&(0x7f0000000340)="01b809f58adebf59d4012637d041f5dec0f9a648bbf100314a53b9a4b883ed0a19729dcf4d074466934a4e43b8a5f2f8584bd8eb7a93ec0630fe6cd89b381124a9046e7202d7fafdb7c677070e272f6c28f2044195c93ce61b8b735f022a0e719828020c094530a3494cd37e48e841bb351425dfd1c4293dd68a422effd6a2c542bca675a973fa9375b3d16a772ae5dcfed06d5051cbc2bcef9ba60c564246d506bd15a6575ed80430f1ac6dacbe263de07b", 0xb2}, {&(0x7f0000000400)="e76bbd19bb90239c47f7ff0467d0a1895363f2031dcc7ed6c1132de0ec42f5261bf783ffb76cb6b8d1462e646324b734ef9aa64f2bcdc5eda8e534d96689520f47d0c02d868bd8fe7a9becfd97c81bbf0fdf537e725872", 0x57}, {&(0x7f0000000480)="1e4e2dadda8722ac66e2f688d0d9af966de1d02e775c5e75f75be32e751c1d5ed13bc5703e189717470278b5b5ff30596db43795bf0586ed42070a8c0852ec70b3c89f20aec97ff0671376f977ede3426765742c3851cd2c74439e28cf0dab62daeea3c1d0a3c2bf0eb5893d15d0c7e7b6d2ce8cdd5b82e972f4378ab5db2e86781d29ab52c14655dde5102512a2f3adb31f62bf70c15e267a8d8058cfe4933f7dc894628f64946cda9fbc867882dfebbd979d2e27ed848c0f904c16ffeab1ec2f2565fabb12a36e6ceca2975c83ca4a630f8d4392b8fb47149da66641cbc0b2e6fc1c060f4abe701a21e05f85df9ddd787db6", 0xf3}, {&(0x7f0000000580)="1fb43471b917e62ff923cfb5c999af58d7e308838a55ff6dd5559a8aa514dcca42e190a1dc4c557c9669285d3376655527cc60778a922a95647471ba91e82de86984835946a6ac7a38111297f2d7251aca7afd0d9189451b039f726cd294ab8d89d8c4683aadcab8e3c103610bbce82952fe76c7fd43e052fab67c4d8b730fd8e8285258", 0x84}, {&(0x7f00000011c0)="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", 0x210}, {&(0x7f0000000640)="1a", 0x1}], 0x9}, 0x4000800) 00:50:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 00:50:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000004c0)={0x1, @sliced}) 00:50:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 00:50:08 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 00:50:08 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0x40049409, &(0x7f0000000940)) 00:50:08 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "3f14ce8dfdfe609d90c06acb18b0396da49b37276d8198aec5b24b3c7b2c44b2638942b033f1ba18bf2a67a737b33246cd50a24a263603d2647190a3e64ddce9"}, 0x48, 0xffffffffffffffff) keyctl$search(0x3, r0, 0x0, 0x0, 0x0) 00:50:08 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @private0}, r1}}, 0x48) 00:50:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 00:50:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 00:50:08 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0x10, 0x0) 00:50:08 executing program 4: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) 00:50:08 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x547b, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp}) 00:50:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 00:50:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 00:50:08 executing program 4: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000380)) 00:50:08 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0d05605, &(0x7f00000000c0)) 00:50:08 executing program 3: socketpair(0x1e, 0x0, 0x8, &(0x7f0000000000)) 00:50:08 executing program 0: keyctl$search(0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:50:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) 00:50:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 00:50:08 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) [ 209.107520][ T25] audit: type=1400 audit(1647910208.316:218): avc: denied { create } for pid=5026 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 00:50:08 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0205647, &(0x7f00000000c0)) 00:50:08 executing program 4: keyctl$search(0x1e, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:50:08 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0x2, 0x0) 00:50:08 executing program 2: sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000050000000c0001800800030000000000180002"], 0x38}}, 0x0) 00:50:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) 00:50:08 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000008800)=[{&(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0e177a49201d233409e549e0ca90052349d83f6c99d9120e38bc1b45be288b86d1bf107343bfa0990341953b52d5710965d1c06904b29eb22f147da17fb80d"}, 0x60, 0x0}], 0x1, 0x0) 00:50:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 00:50:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xf3bf, 0x1, 0x1, 0x0, 0x7f}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0xe) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x71, 0x0, {{0x0, 0x4}, 0xff}}, 0x18) syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 00:50:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @raw_data="55f77122ea39a4dcc06013cfff4f16bf4e0c57faaab0e6f91fdcac356edc67569499d5707b954f7240f14507890f4adcd345a3fc6aca88d5e22ebdf1726ffe34704252c69e66615543faad244a85de1af3eb6ddbbb54f3e111e6aa34032a2b025d137cafa87898468dcf3afdb6fce6297cfcc11441925f65c08333aab91ea9c4f939c6a9bfdb440ed27eccd0cd33bb369354782f8bd94374304a6aba14a2930daa8d220556451d6be08f2cc6714c26e7b6191f1d8ba32ff98db17560bcc3fd720c709c513522a116"}) 00:50:08 executing program 3: io_setup(0x9, &(0x7f0000000000)=0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) [ 209.336609][ T25] audit: type=1400 audit(1647910208.546:219): avc: denied { create } for pid=5047 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 00:50:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) [ 209.400668][ T5055] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 00:50:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0x1, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 00:50:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) 00:50:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0x5421, 0x0) [ 209.437741][ T25] audit: type=1400 audit(1647910208.546:220): avc: denied { write } for pid=5047 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 00:50:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000840)={&(0x7f0000000180)={0xa, 0x4e20, 0x0, @remote, 0x8}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000001c0)="84f62999dabb7765dbe431acfea148490f039ce56b67bb77b47bbbdf49e71a0c595501d98e9c795138a1a3f61b40577d196c15bf33ffe6d51b38f94b3a340f3762385c829c5bada838cc7c0b98ce96b87add123ff042527ffe74169878b77cb12448b6600072ad2fb0d657e7eeab4c9ce2e3519a7240377c82ce4364ee02700c5bb7d191bd28d73cfd37f28ea47abe3d0d029b8c95cb15322c9659bcb21bd82ca4a4d3", 0xa3}, {&(0x7f0000000280)="c714a538256192eb70191b08f99f799004f3884fe1ad5650c2d52c1c19a6aed41507e0a0ceb7a2eb9289817f7b9034b719af349248dc550a320f6c64b08b905b57faa833c8cc02e63c18d3282f0be2a7fba551a66b57e62ff0bbbee33bfa55ccacbcb992ef51a636decb6dea7f2f", 0x6e}, {&(0x7f0000000340)="01b809f58adebf59d4012637d041f5dec0f9a648bbf100314a53b9a4b883ed0a19729dcf4d074466934a4e43b8a5f2f8584bd8eb7a93ec0630fe6cd89b381124a9046e7202d7fafdb7c677070e272f6c28f2044195c93ce61b8b735f022a0e719828020c094530a3494cd37e48e841bb351425dfd1c4293dd68a422effd6a2c542bca675a973fa9375b3d16a772ae5dcfed06d5051cbc2bcef9ba60c564246d506bd15a6575ed80430f1ac6dacbe263de07b", 0xb2}, {&(0x7f0000000400)="e76bbd19bb90239c47f7ff0467d0a1895363f2031dcc7ed6c1132de0ec42f5261bf783ffb76cb6b8d1462e646324b734ef9aa64f2bcdc5eda8e534d96689520f47d0c02d868bd8fe7a9becfd97c81bbf0fdf537e725872", 0x57}, {&(0x7f0000000480)="1e4e2dadda8722ac66e2f688d0d9af966de1d02e775c5e75f75be32e751c1d5ed13bc5703e189717470278b5b5ff30596db43795bf0586ed42070a8c0852ec70b3c89f20aec97ff0671376f977ede3426765742c3851cd2c74439e28cf0dab62daeea3c1d0a3c2bf0eb5893d15d0c7e7b6d2ce8cdd5b82e972f4378ab5db2e86781d29ab52c14655dde5102512a2f3adb31f62bf70c15e267a8d8058cfe4933f7dc894628f64946cda9fbc867882dfebbd979d2e27ed848c0f904c16ffeab1ec2f2565fabb12a36e6ceca2975c83ca4a630f8d4392b8fb47149da66641cbc0b2e6fc1c060f4abe701a21e05f85df9ddd787db6", 0xf3}, {&(0x7f0000000580)="1fb43471b917e62ff923cfb5c999af58d7e308838a55ff6dd5559a8aa514dcca42e190a1dc4c557c9669285d3376655527cc60778a922a95647471ba91e82de86984835946a6ac7a38111297f2d7251aca7afd0d9189451b039f726cd294ab8d89d8c4683aadcab8e3c103610bbce82952fe76c7fd43e052fab67c4d8b730fd8e8285258", 0x84}, {&(0x7f00000011c0)="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", 0x208}], 0x7}, 0x0) 00:50:08 executing program 4: keyctl$search(0xf, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:50:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) [ 209.524368][ T25] audit: type=1400 audit(1647910208.646:221): avc: denied { read } for pid=5057 comm="syz-executor.3" name="ptp0" dev="devtmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 00:50:08 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000840)={&(0x7f0000000180)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000001c0)="84f62999dabb7765dbe431acfea148490f039ce56b67bb77b47bbbdf49e71a0c595501d98e9c795138a1a3f61b40577d196c15bf33ffe6d51b38f94b3a340f3762385c829c5bada838cc7c0b98ce96b87add123ff042527ffe74169878b77cb12448b6600072ad2fb0d657e7eeab4c9ce2e3519a7240377c82ce4364ee02700c5bb7", 0x82}, {&(0x7f0000000280)="c714a538256192eb70191b08f99f799004f3884fe1ad5650c2d52c1c19a6aed41507e0a0ceb7a2eb9289817f7b9034b719af349248dc550a320f6c64b08b905b57faa833c8cc02e63c18d3282f0be2a7fba551a66b57e62ff0bbbee33bfa55ccacbcb992ef51a636decb6dea7f", 0x6d}, {0x0}, {&(0x7f0000000340)="01b809f58adebf59d4012637d041f5dec0f9a648bbf100314a53b9a4b883ed0a19729dcf4d074466934a4e43b8a5f2f8584bd8eb7a93ec0630fe6cd89b381124a9046e7202d7fafdb7c677070e272f6c28f2044195c93ce61b8b735f022a0e719828020c094530a3494cd37e48e841bb351425dfd1c4293dd68a422effd6a2c542bca675a973fa9375b3d16a772ae5dcfed0", 0x92}, {&(0x7f0000000400)="e76bbd19bb90239c47f7", 0xa}, {&(0x7f0000000480)="1e4e2dadda8722ac66e2f688d0d9af966de1d02e775c5e75f75be32e", 0x1c}, {0x0}, {&(0x7f00000011c0)="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", 0x409}, {0x0}], 0x9}, 0x0) [ 209.608255][ T25] audit: type=1400 audit(1647910208.646:222): avc: denied { open } for pid=5057 comm="syz-executor.3" path="/dev/ptp0" dev="devtmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 00:50:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000600000000000000000008000300", @ANYRES32=0x0], 0x30}}, 0x0) 00:50:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:08 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x1, 0x1}) 00:50:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) 00:50:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0xa0) 00:50:08 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002100)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty, 0x81}, 0x1c, 0x0, 0x0, &(0x7f0000002580)=ANY=[], 0x1070}, 0x0) [ 209.716673][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:50:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:09 executing program 2: keyctl$search(0x18, 0x0, &(0x7f0000000080)='.dead\x00', 0x0, 0xfffffffffffffffd) 00:50:09 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x1) 00:50:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) 00:50:09 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int]}, {0x0, [0x0]}}, &(0x7f0000001200)=""/4096, 0x2b, 0x1000, 0x1}, 0x20) 00:50:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000840)={&(0x7f0000000180)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000001c0)="84f62999dabb7765dbe431acfea148490f039ce56b67bb77b47bbbdf49e71a0c595501d98e9c795138a1a3f61b40577d196c15bf33ffe6d51b38f94b3a340f3762385c829c5bada838cc7c0b98ce96b87add123ff042527ffe74169878b77cb12448b6600072ad2fb0d657e7eeab4c9ce2e3519a7240377c82ce4364ee02700c5bb7d1", 0x83}, {&(0x7f0000000280)="c714a538256192eb70191b08f99f799004f3884fe1ad5650c2d52c1c19a6aed41507e0a0ceb7a2eb9289817f7b9034b719af349248dc550a320f6c64b08b905b57faa833c8cc02e63c18d3282f0be2a7fba551a66b57e62ff0bbbee33bfa55ccacbcb992ef51a636de", 0x69}, {0x0}, {&(0x7f0000000340)="01b809f58adebf59d4012637d041f5dec0f9a648bbf100314a53b9a4b883ed0a19729dcf4d074466934a4e43b8a5f2f8584bd8eb7a93ec0630fe6cd89b381124a9046e7202d7fafdb7c677070e272f6c28f2044195c93ce61b8b735f022a0e719828020c094530a3494cd37e48e841bb351425dfd1c4293dd68a422effd6a2c542bca675a973fa9375b3d16a772ae5dcfed0", 0x92}, {&(0x7f0000000400)="e76bbd19bb90239c47f7", 0xa}, {&(0x7f0000000480)="1e4e2dadda8722ac66e2f688d0d9af966de1d02e775c5e75f75be32e751c1d5ed13bc5703e189717470278b5b5ff30596db43795bf0586ed42070a8c0852ec70b3c89f20aec97ff0671376f977ede3426765742c3851cd2c74439e28", 0x5c}, {0x0}, {&(0x7f00000011c0)="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", 0x63c}, {&(0x7f0000000640)="1acf980d309d2faeb47d4c8e1c7296abc4cd5815e8b92783582016d4c6ca5470f958e0d14450a4e14f2be5e6e6ac0f7b737364d630bca1b798a7387371ded390403688399acfd2291df7d26b44b9cb8c8c0246dd2746cfd3b000e45c9acf7ec133e3dffd353634b687499e03df723f13bca7d4d2a2b0dbafba8e8ce62ff20ba1aaa103c2a5b5b07f4be517834f457b0380af4a827f0038ef7881ce8930d8500c5a5d352e211bffc9833deccd3a6f6724cc693504304ab1eb2a59c29a986d1161091b110bf73d5688eec3fe2ac5f6fd0b8f0668e37584bcad8a", 0xd9}], 0x9}, 0x4000800) 00:50:09 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x2, @sdr}) [ 209.882113][ T25] audit: type=1400 audit(1647910209.086:223): avc: denied { read } for pid=5089 comm="syz-executor.4" name="fb0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 00:50:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) 00:50:09 executing program 0: pselect6(0x40, &(0x7f0000000440)={0x6}, 0x0, 0x0, 0x0, 0x0) 00:50:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x0, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000bc0)={'ip6_vti0\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}) 00:50:09 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x801c581f, 0x0) 00:50:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x0, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) [ 210.017599][ T25] audit: type=1400 audit(1647910209.116:224): avc: denied { open } for pid=5089 comm="syz-executor.4" path="/dev/fb0" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 210.017644][ T25] audit: type=1400 audit(1647910209.126:225): avc: denied { ioctl } for pid=5089 comm="syz-executor.4" path="/dev/fb0" dev="devtmpfs" ino=626 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 00:50:09 executing program 4: r0 = inotify_init() ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x541b, 0x0) 00:50:09 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000480)={0x1, @vbi={0x6886526d, 0x49, 0x5, 0x32314142, [0xac1c, 0x40], [0x2], 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x0, @sdr={0x30395056, 0x8}}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffffc}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r4, &(0x7f0000000680), 0x0, 0x811, &(0x7f0000000780), 0x12) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000400)=@multiplanar_userptr={0x0, 0x3, 0x4, 0x0, 0x5, {0x77359400}, {0xa03fd08d16bf2a8d, 0xc, 0x0, 0x7, 0x0, 0xf8, "2c13bbaf"}, 0x0, 0x2, {&(0x7f0000000380)=[{0x9, 0x1, {&(0x7f0000000300)}, 0x8}, {0x0, 0xfffffffd, {&(0x7f0000000340)}, 0x4}]}, 0x6}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@userptr={0x101, 0x2, 0x4, 0x70000, 0x41, {0x0, 0x2710}, {0x2, 0x0, 0x8, 0x2, 0xf0, 0x2, "1604e32e"}, 0xffffffff, 0x2, {&(0x7f0000000140)}, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x1000, 0x7ff, 0x1, {0x1, @sliced={0x81, [0x0, 0x3, 0x4, 0x8, 0x8, 0x1, 0x400, 0x4, 0x5, 0x0, 0x7ff, 0xf61, 0x5, 0x40, 0x8001, 0x401, 0xc000, 0x200, 0x0, 0x5, 0x34a0, 0x7ff, 0xfff8, 0x7, 0x7, 0x0, 0x0, 0xca, 0x0, 0x1, 0x9, 0xaad4, 0x3, 0x50, 0x77b, 0x4, 0x6, 0xde4c, 0x8, 0x4, 0x4, 0xfffb, 0x2a, 0x1f8, 0x3, 0x7, 0x0, 0x400], 0x80000000}}, 0x6}) 00:50:09 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34424752, 0x0, @stepwise}) 00:50:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x0, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:09 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xf3bf, 0x1, 0x1, 0x0, 0x7f}) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000480)={0x0, @win={{0x0, 0x1, 0x6}, 0x0, 0x5, &(0x7f0000000340)={{0xac0, 0x7, 0x5, 0x1f}}, 0x0, &(0x7f0000000380)="eba6bda0ddf965791d07f8dc48f83e190a875c7db80c3c13a1303ec6c4869e0bea1db48dd1a86a74dcc9189f80dee497a8b8ea89e13e2e26e29ae4bebd744bd6dcb9ab87dea4f1bdfba596297df20f16d6a7cc82704f8d2defd8aa3d9625c6dac4518c486a8335ad2687aa688ed3dd0c75964f4a6125bf1608ca309c2b3716e728f67a96322839035c3130eb267cae08514c9d997a1b481a0112cdde6c89fc5468efd714044303388bc38339b703d3504cc309561d7b84f47377f447a476a99ecc8e0448b0a554b4cf6000f0639ee0bd3876ff0da2993b87511436474cedc8", 0x6f}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x0, 0x1, 0x2}) [ 210.325803][ T25] audit: type=1400 audit(1647910209.536:226): avc: denied { write } for pid=5120 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 00:50:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0800a4"], 0x30}}, 0x0) 00:50:10 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x10, 0x1d, 0x1}, 0x10}], 0x1}, 0x0) 00:50:10 executing program 4: ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)) 00:50:10 executing program 4: r0 = inotify_init() syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x60, 0x7, [{{0x9, 0x4, 0x0, 0xf6, 0x2, 0x7, 0x1, 0x3, 0x56, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x31, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x4, 0x8}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x610, 0xc, 0x8, 0x8f, 0x10, 0x20}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x425}}, {0xce, &(0x7f0000000300)=@string={0xce, 0x3, "547bbf90a11bc56e781abd7bb5020c6f4d363db0ece5130998d7f0feda89a97822c2628a4282cb0011277eeb0dedb5bbf3bdda03cbfece6d85ce8b18de71b9f38af1f1d666259cd7ecbeb718f1d05f8d6c3fa04f8d20fb7aa923510ef51865ab8c4f137426f83611b1fbfd8128850d133aa01dfe75ddf448da49a2126594c5c6a260e615ceabcc1f34dfb865fb205e124f90d1eb2fc11a2bc879b50012169dc988a8398e33ff3f7f74bdc64e4c7c2abf4178b89ed8b7ca53463fce32e29beb53218866631801b28ebe073cb0"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x820}}, {0x0, 0x0}]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 00:50:10 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x0, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x10, 0x1d, 0x1}, 0x10}], 0x1}, 0x0) [ 211.166898][ T5125] syz-executor.3: vmalloc error: size 106426368, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 211.209813][ T5125] CPU: 0 PID: 5125 Comm: syz-executor.3 Not tainted 5.17.0-syzkaller #0 [ 211.218185][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.228253][ T5125] Call Trace: [ 211.231538][ T5125] [ 211.234473][ T5125] dump_stack_lvl+0xcd/0x134 [ 211.239099][ T5125] warn_alloc.cold+0x9b/0x189 [ 211.243794][ T5125] ? zone_watermark_ok_safe+0x290/0x290 [ 211.249352][ T5125] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 211.255525][ T5125] ? __vmalloc_node_range+0x7bf/0x1060 [ 211.261005][ T5125] __vmalloc_node_range+0xe18/0x1060 [ 211.266312][ T5125] ? vfree_atomic+0xe0/0xe0 [ 211.270830][ T5125] ? rcu_read_lock_sched_held+0x3a/0x70 [ 211.276388][ T5125] ? vb2_vmalloc_alloc+0x124/0x400 [ 211.281507][ T5125] vmalloc_user+0x67/0x80 [ 211.285847][ T5125] ? vb2_vmalloc_alloc+0x124/0x400 [ 211.290973][ T5125] vb2_vmalloc_alloc+0x124/0x400 [ 211.295932][ T5125] ? vb2_vmalloc_dmabuf_ops_detach+0x190/0x190 [ 211.302099][ T5125] __vb2_queue_alloc+0x60b/0x1180 [ 211.307147][ T5125] vb2_core_create_bufs+0x540/0x950 [ 211.312362][ T5125] ? __vb2_queue_alloc+0x1180/0x1180 [ 211.317668][ T5125] ? __stack_depot_save+0x35/0x500 [ 211.322795][ T5125] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 211.328790][ T5125] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 211.335050][ T5125] vb2_create_bufs+0x58d/0x7d0 [ 211.339838][ T5125] ? vb2_reqbufs+0x200/0x200 [ 211.344437][ T5125] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 211.350436][ T5125] ? mutex_lock_io_nested+0x1150/0x1150 [ 211.355998][ T5125] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 211.362257][ T5125] vb2_ioctl_create_bufs+0x2f3/0x4d0 [ 211.367557][ T5125] v4l_create_bufs+0xb2/0x160 [ 211.372252][ T5125] __video_do_ioctl+0xb94/0xe20 [ 211.377117][ T5125] ? v4l_print_control+0x60/0x60 [ 211.382074][ T5125] video_usercopy+0x475/0x16b0 [ 211.386857][ T5125] ? v4l_print_control+0x60/0x60 [ 211.391811][ T5125] ? v4l_enumstd+0x60/0x60 [ 211.396241][ T5125] ? selinux_inode_getsecctx+0x90/0x90 [ 211.401719][ T5125] ? remove_pfn_range_from_zone+0x14c/0x910 [ 211.407627][ T5125] ? __fget_files+0x28c/0x470 [ 211.412316][ T5125] v4l2_ioctl+0x1b3/0x250 [ 211.416662][ T5125] ? v4l2_prio_init+0x20/0x20 [ 211.421350][ T5125] __x64_sys_ioctl+0x193/0x200 [ 211.426125][ T5125] do_syscall_64+0x35/0xb0 [ 211.430557][ T5125] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 211.436468][ T5125] RIP: 0033:0x7f6a92803049 [ 211.440893][ T5125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 211.460516][ T5125] RSP: 002b:00007f6a91178168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.468945][ T5125] RAX: ffffffffffffffda RBX: 00007f6a92915f60 RCX: 00007f6a92803049 [ 211.476930][ T5125] RDX: 0000000020000040 RSI: 00000000c100565c RDI: 0000000000000003 [ 211.484915][ T5125] RBP: 00007f6a9285d08d R08: 0000000000000000 R09: 0000000000000000 [ 211.492895][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.500884][ T5125] R13: 00007fffe3dad32f R14: 00007f6a91178300 R15: 0000000000022000 [ 211.508870][ T5125] [ 211.535265][ T5125] Mem-Info: [ 211.543198][ T5125] active_anon:357 inactive_anon:156780 isolated_anon:0 [ 211.543198][ T5125] active_file:3762 inactive_file:7755 isolated_file:0 [ 211.543198][ T5125] unevictable:768 dirty:14 writeback:0 [ 211.543198][ T5125] slab_reclaimable:21098 slab_unreclaimable:116667 [ 211.543198][ T5125] mapped:27507 shmem:1861 pagetables:892 bounce:0 [ 211.543198][ T5125] kernel_misc_reclaimable:0 [ 211.543198][ T5125] free:1266305 free_pcp:7686 free_cma:0 [ 211.586354][ T5125] Node 0 active_anon:1420kB inactive_anon:626188kB active_file:14976kB inactive_file:31020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110028kB dirty:56kB writeback:0kB shmem:4968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB kernel_stack:9840kB pagetables:3560kB all_unreclaimable? no [ 211.617961][ T5125] Node 1 active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 211.618180][ T3680] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 211.660071][ T5125] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.688056][ T5125] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 211.694254][ T5125] Node 0 DMA32 free:1100740kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:1420kB inactive_anon:626188kB active_file:14976kB inactive_file:31020kB unevictable:1536kB writepending:56kB present:3129332kB managed:2716696kB mlocked:0kB bounce:0kB free_pcp:29640kB local_pcp:21988kB free_cma:0kB [ 211.726800][ T5125] lowmem_reserve[]: 0 0 0 0 0 [ 211.731663][ T5125] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.761039][ T5125] lowmem_reserve[]: 0 0 0 0 0 [ 211.770954][ T5125] Node 1 Normal free:3949852kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.802273][ T5125] lowmem_reserve[]: 0 0 0 0 0 [ 211.810206][ T5125] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 211.823348][ T5125] Node 0 DMA32: 30*4kB (UE) 2*8kB (UM) 1*16kB (E) 1*32kB (U) 1*64kB (M) 12*128kB (UM) 8*256kB (UME) 7*512kB (M) 3*1024kB (UM) 2*2048kB (M) 265*4096kB (M) = 1100024kB [ 211.840505][ T5125] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 211.852312][ T5125] Node 1 Normal: 133*4kB (UME) 197*8kB (UE) 136*16kB (UE) 89*32kB (UE) 63*64kB (UME) 35*128kB (UM) 10*256kB (UE) 7*512kB (UE) 0*1024kB 0*2048kB 959*4096kB (M) = 3949852kB [ 211.870144][ T5125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.880716][ T5125] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.890117][ T5125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.899893][ T5125] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.909266][ T5125] 13378 total pagecache pages [ 211.914028][ T5125] 0 pages in swap cache [ 211.918176][ T5125] Swap cache stats: add 0, delete 0, find 0/0 [ 211.924445][ T5125] Free swap = 0kB [ 211.928171][ T5125] Total swap = 0kB [ 211.931890][ T5125] 2097051 pages RAM [ 211.935754][ T5125] 0 pages HighMem/MovableOnly [ 211.940419][ T5125] 384532 pages reserved [ 211.944673][ T5125] 0 pages cma reserved [ 212.112844][ T3680] usb 5-1: not running at top speed; connect to a high speed hub [ 212.192998][ T3680] usb 5-1: config 1 interface 0 has no altsetting 0 00:50:11 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0x401c5820, &(0x7f0000000940)) 00:50:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000840)={&(0x7f0000000180)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000001c0)="84f62999dabb7765dbe431acfea148490f039ce56b67bb77b47bbbdf49e71a0c595501d98e9c795138a1a3f61b40577d196c15bf33ffe6d51b38f94b3a340f3762385c829c5bada838cc7c0b98ce96b87add123ff042527ffe74169878b77cb12448b6600072ad2fb0d657e7eeab4c9ce2e3519a7240377c82ce4364ee02700c5bb7d191bd28d73cfd37f28ea47abe3d0d029b8c95cb15322c9659bcb21b", 0x9e}, {&(0x7f0000000280)="c714a538256192eb70191b08f99f799004f3884fe1ad5650c2d52c1c19a6aed41507e0a0ceb7a2eb9289817f7b9034b719af349248dc550a320f6c64b08b905b57faa833c8cc02e63c18d3282f0be2a7fba551a66b57e62ff0bbbee33bfa55ccacbcb992ef51a636decb6dea7f2f", 0x6e}, {&(0x7f0000000300)="485612e85523bca951ec6b11442df6c438e0b9293ea08f5ac5f30fca897fb8", 0x1f}, {&(0x7f0000000340)="01b809f58adebf59d4012637d041f5dec0f9a648bbf100314a53b9a4b883ed0a19729dcf4d074466934a4e43b8a5f2f8584bd8eb7a93ec0630fe6cd89b381124a9046e7202d7fafdb7c677070e272f6c28f2044195c93ce61b8b735f022a0e719828020c094530a3494cd37e48e841bb351425dfd1c4293dd68a422effd6a2c542bca675a973fa9375b3d16a772ae5dcfed06d5051cbc2bcef9ba60c564246d506bd15a6575ed80430f1ac6dacbe263de07b", 0xb2}, {&(0x7f0000000400)="e76bbd19bb90239c47f7ff0467d0a1895363f2031dcc7ed6c1132de0ec42f5261bf783ffb76cb6b8d1462e646324b734ef9aa64f2bcdc5eda8e534d96689520f47d0c02d868bd8fe7a9becfd97c81bbf0fdf537e725872", 0x57}, {&(0x7f0000000480)="1e4e2dadda8722ac66e2f688d0d9af966de1d02e775c5e75f75be32e751c1d5ed13bc5703e189717470278b5b5ff30596db43795bf0586ed42070a8c0852ec70b3c89f20aec97ff0671376f977ede3426765742c3851cd2c74439e28cf0dab62daeea3c1d0a3c2bf0eb5893d15d0c7e7b6d2ce8cdd5b82e972f4378ab5db2e86781d29ab52c14655dde5102512a2f3adb31f62bf70c15e267a8d8058cfe4933f7dc894628f64946cda9fbc867882dfebbd979d2e27ed848c0f904c16ffeab1ec2f2565fabb12a36e6ceca2975c83ca4a630f8d4392b8fb47149da66641cbc0b2e6fc1c060f4abe701a21e05f85df9ddd787db6", 0xf3}, {&(0x7f0000000580)="1fb43471b917e62ff923cfb5c999af58d7e308838a55ff6dd5559a8aa514dcca42e190a1dc4c557c9669285d3376655527cc60778a922a95647471ba91e82de86984835946a6ac7a38111297f2d7251aca7afd0d9189451b039f726cd294ab8d89d8c4683aadcab8e3c103610bbce82952fe76c7fd43e052fab67c4d8b730fd8e8285258", 0x84}, {&(0x7f00000011c0)="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", 0x202}], 0x8}, 0x0) 00:50:11 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x0, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:11 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x10, 0x1d, 0x1}, 0x10}], 0x1}, 0x0) 00:50:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xf3bf, 0x1, 0x1}) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0xe) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x2, 0x4}}}, 0x18) r1 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000480)={0x0, @win={{0x9, 0x1, 0x6, 0x4}, 0x0, 0x0, &(0x7f0000000340)={{0x0, 0x0, 0x5, 0x1f}, &(0x7f0000000300)={{0x0, 0x0, 0xe36d, 0xae3}}}, 0x0, 0x0}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x0, 0x1, 0x2}) 00:50:11 executing program 2: keyctl$search(0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:50:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000bc0)={'ip6_vti0\x00', 0x0}) 00:50:11 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x0, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:11 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) [ 212.461277][ T5160] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 212.563087][ T3680] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 212.579841][ T3680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.588358][ T3680] usb 5-1: Product: ࠠ [ 212.592639][ T3680] usb 5-1: Manufacturer: 答邿ᮡ滅᩸箽ʵ漌㙍뀽ओ힘ﻰ觚碩숢詢艂Ë✑뮵뷳Ϛﻋ淎캅ᢋ燞훱╦힜뻬ᢷ탱赟㽬侠₍竻⎩๑ᣵꭥ侌琓ᄶﮱ臽蔨ግꀺ︝䣴䧚ኢ鑥웅悢ᗦꯎῌ斸⃻቞遏섯⬚秈µᘒ증ꢈ踹Ｓ缿뵴仆籌뼪硁麸럘及㽆㋎鯢叫蠡捦Ę躲޾뀼 [ 212.964968][ T3680] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 246 proto 3 vid 0x0525 pid 0xA4A8 [ 212.986604][ T3680] usb 5-1: USB disconnect, device number 3 [ 213.000300][ T3680] usblp0: removed 00:50:12 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x1, 0x8000000, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') 00:50:12 executing program 3: keyctl$search(0x11, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:50:12 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0) r1 = getuid() setresuid(0xee00, 0xee00, r1) 00:50:12 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000003600)={0x20, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa5cb8dba7968ee5f}]}]}, 0x20}}, 0x0) 00:50:12 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x10, 0x1d, 0x1}, 0x10}], 0x1}, 0x0) 00:50:12 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) 00:50:12 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x5450, 0x0) 00:50:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x7}]}}, &(0x7f0000001200)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 00:50:12 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x10, 0x1d, 0x1}, 0x10}], 0x1}, 0x0) 00:50:12 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205647, &(0x7f0000000940)) [ 213.467389][ T5173] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:50:12 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x43, 0x3}]}}, &(0x7f0000001200)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 00:50:12 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) 00:50:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000840)={&(0x7f0000000180)={0xa, 0x4e20, 0x0, @remote, 0x8}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000001c0)="84f62999dabb7765dbe431acfea148490f039ce56b67bb77b47bbbdf49e71a0c595501d98e9c795138a1a3f61b40577d196c15bf33ffe6d51b38f94b3a340f3762385c829c5bada838cc7c0b98ce96b87add123ff042527ffe74169878b77cb12448b6600072ad2fb0d657e7eeab4c9ce2e3519a7240377c82ce4364ee02700c5bb7d191bd28d73cfd37f28ea47abe3d0d029b8c95cb15322c9659bcb21bd82ca4a4d3", 0xa3}, {&(0x7f0000000280)="c714a538256192eb70191b08f99f799004f3884fe1ad5650c2d52c1c19a6aed41507e0a0ceb7a2eb9289817f7b9034b719af349248dc550a320f6c64b08b905b57faa833c8cc02e63c18d3282f0be2a7fba551a66b57e62ff0bbbee33bfa55ccacbcb992ef51a636decb6dea7f2f", 0x6e}, {&(0x7f0000000300)="485612e85523bca951ec6b11442df6c438e0b9293ea08f5ac5f30fca897fb8", 0x1f}, {&(0x7f0000000340)="01b809f58adebf59d4012637d041f5dec0f9a648bbf100314a53b9a4b883ed0a19729dcf4d074466934a4e43b8a5f2f8584bd8eb7a93ec0630fe6cd89b381124a9046e7202d7fafdb7c677070e272f6c28f2044195c93ce61b8b735f022a0e719828020c094530a3494cd37e48e841bb351425dfd1c4293dd68a422effd6a2c542bca675a973fa9375b3d16a772ae5dcfed06d5051cbc2bcef9ba60c564246d506bd15a6575ed80430f1ac6dacbe263de07b", 0xb2}, {&(0x7f0000000400)="e76bbd19bb90239c47f7ff0467d0a1895363f2031dcc7ed6c1132de0ec42f5261bf783ffb76cb6b8d1462e646324b734ef9aa64f2bcdc5eda8e534d96689520f47d0c02d868bd8fe7a9becfd97c81bbf0fdf537e725872", 0x57}, {&(0x7f0000000480)="1e4e2dadda8722ac66e2f688d0d9af966de1d02e775c5e75f75be32e751c1d5ed13bc5703e189717470278b5b5ff30596db43795bf0586ed42070a8c0852ec70b3c89f20aec97ff0671376f977ede3426765742c3851cd2c74439e28cf0dab62daeea3c1d0a3c2bf0eb5893d15d0c7e7b6d2ce8cdd5b82e972f4378ab5db2e86781d29ab52c14655dde5102512a2f3adb31f62bf70c15e267a8d8058cfe4933f7dc894628f64946cda9fbc867882dfebbd979d2e27ed848c0f904c16ffeab1ec2f2565fabb12a36e6ceca2975c83ca4a630f8d4392b8fb47149da66641cbc0b2e6fc1c060f4abe701a21e05f85df9ddd787db6", 0xf3}, {&(0x7f0000000580)="1fb43471b917e62ff923cfb5c999af58d7e308838a55ff6dd5559a8aa514dcca42e190a1dc4c557c9669285d3376655527cc60778a922a95647471ba91e82de86984835946a6ac7a38111297f2d7251aca7afd0d9189451b039f726cd294ab8d89d8c4683aadcab8e3c103610bbce82952fe76c7fd43e052fab67c4d8b730fd8e8285258", 0x84}, {&(0x7f00000011c0)="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", 0x778}, {&(0x7f0000000640)="1a", 0x1}], 0x9}, 0x4000800) 00:50:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1}}, 0x10) 00:50:12 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x10, 0x1d, 0x1}, 0x10}], 0x1}, 0x0) 00:50:12 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x700, 0x0, 0x0, 0x0, 0x0, "bee89ca06445600e129b89e5eee585a891705850a50f0ae16c3756716a352c994d67734fb0f79af45cec0f2457d5190007faf4525f337f915bad8a974811ef"}, 0x60) 00:50:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000340)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2890"], 0x40}, 0x0) 00:50:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0x4020940d, 0x0) [ 213.633675][ T5186] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:50:12 executing program 3: keyctl$search(0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:50:12 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) 00:50:12 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x20}], 0x1}, 0x0) [ 213.734919][ T25] audit: type=1400 audit(1647910212.946:227): avc: denied { bind } for pid=5195 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 00:50:13 executing program 4: sched_getaffinity(0x0, 0x8, &(0x7f0000001340)) 00:50:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xf3bf, 0x1, 0x1}) 00:50:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x20}], 0x1}, 0x0) 00:50:13 executing program 3: socketpair(0x2c, 0x3, 0x101, &(0x7f0000001180)) 00:50:13 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) [ 213.834295][ T5205] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:50:13 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) 00:50:13 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "5aa58445c89b36ae1b566bf1217f10e3ef5d6e54123ea0875b1d1b780ddec9f0c2ada156daeba7e75f83021c2897d72427e23896782593e0363d025c2c55e8"}, 0x60) 00:50:13 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000380)={0x9, 0x1, &(0x7f0000000200)=[0x0], &(0x7f0000000240), &(0x7f0000000280), 0x0}) [ 213.935700][ T25] audit: type=1400 audit(1647910213.146:228): avc: denied { create } for pid=5211 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 00:50:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x20}], 0x1}, 0x0) 00:50:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0x801c581f, 0x0) [ 213.993316][ T5218] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:50:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0x401c5820, 0x0) 00:50:13 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) 00:50:13 executing program 3: keyctl$search(0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd) [ 214.146753][ T5228] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:50:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 00:50:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:13 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @sdr}) 00:50:13 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x20}], 0x1}, 0x0) 00:50:13 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x81, 0x1, 0x2}) 00:50:13 executing program 2: r0 = memfd_create(&(0x7f0000000000)='(*&^/!\x00', 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0x5421, &(0x7f0000000940)={0x480a1bae490605da}) 00:50:13 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0585609, &(0x7f00000000c0)) 00:50:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000001200)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 00:50:13 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000840)={&(0x7f0000000180)={0xa, 0x4e20, 0x0, @remote}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000001c0)="84f62999dabb7765dbe431acfea148490f039ce56b67bb77b47bbbdf49e71a0c595501d98e9c795138a1a3f61b40577d196c15bf33ffe6d51b38f94b3a340f3762385c829c5bada838cc7c0b98ce96b87add123ff042527ffe74169878b77cb12448b6600072ad2fb0d657e7eeab4c9ce2e3519a7240377c82ce4364ee02700c5bb7", 0x82}, {&(0x7f0000000280)="c714a538256192eb70191b08f99f79", 0xf}, {&(0x7f0000000300)="485612e85523bca951ec6b11442df6c438", 0x11}, {0x0}, {&(0x7f0000000400)="e76bbd19bb90239c47f7", 0xa}, {&(0x7f0000000480)="1e4e2dadda8722ac66e2f688d0d9af966de1d02e775c5e75f75be32e751c1d5ed13bc5703e189717470278b5b5ff30596db43795bf0586ed42070a8c0852ec70b3c89f20aec97ff0671376f977ede3426765742c3851cd2c74439e28", 0x5c}, {0x0}, {&(0x7f00000011c0)="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", 0x31e}, {&(0x7f0000000640)="1acf980d309d2faeb47d4c8e1c7296abc4cd5815e8b92783582016d4c6ca5470f958e0d14450a4e14f2be5e6e6ac0f7b737364d630bca1b798a7387371ded390403688399acfd2291df7d26b44b9cb8c8c0246dd2746cfd3b000e45c9acf7ec133e3dffd353634b687499e03df723f13bca7d4d2a2b0dbafba8e8ce62ff20ba1aaa103c2a5b5b07f4be517834f457b0380af4a827f0038ef7881ce8930d8500c5a5d352e211bffc9833deccd3a6f6724cc693504304ab1eb2a59c29a986d1161091b110bf73d5688eec3fe2ac5f6fd0b8f0668e37584bcad8a", 0xd9}], 0x9}, 0x0) 00:50:13 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x20}], 0x1}, 0x0) 00:50:13 executing program 0: syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffd, 0x0) 00:50:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1b, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:13 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000001200)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 00:50:13 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x20}], 0x1}, 0x0) 00:50:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 00:50:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0205649, &(0x7f0000000940)) 00:50:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 00:50:14 executing program 3: socketpair(0x29, 0x2, 0xfffffffa, &(0x7f0000000000)) 00:50:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xfffffffc}) 00:50:14 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001700)={&(0x7f0000001440), 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x4}]}, 0x30}}, 0x0) 00:50:14 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r0, 0x0, 0x0, 0x8000}) 00:50:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 00:50:14 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc020660b, 0x0) 00:50:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0285629, &(0x7f0000000940)) 00:50:14 executing program 2: keyctl$search(0xe, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:50:14 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000900), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0x5452, &(0x7f0000000940)) 00:50:14 executing program 0: keyctl$search(0x10, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:50:14 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}, @in={0x2, 0x0, @private}}}, 0x118) 00:50:14 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) inotify_rm_watch(r0, 0x0) 00:50:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r2}}, 0x10) 00:50:14 executing program 1: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x5c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "bb9d9d3a536ff829c6ad8aca5c2c9e4d1b2043ad6e8352ee7e6de86f4b4b55ef3dfeb66a100bfcc633bf19a589e49bed12296bfcae5206e34d1f435dc2373c0df37a66e068460273c26ca689ffad9b12e83154ce"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x84}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x820}, 0x4000000) 00:50:14 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x13, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) 00:50:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f00000002c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000140), 0x62) 00:50:14 executing program 4: syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd5, 0x12, 0xfa, 0x8, 0xc72, 0x14, 0xaddf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd8, 0xf8, 0x2c}}]}}]}}, 0x0) 00:50:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @sdr={0x30385056}}) 00:50:14 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0}, 0x10008005) 00:50:14 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$nfc_llcp(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 215.238962][ T25] audit: type=1400 audit(1647910214.446:229): avc: denied { create } for pid=5297 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.244391][ T5300] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. 00:50:14 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0285628, &(0x7f00000000c0)) 00:50:14 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x61}]}) 00:50:14 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x73, 0xf2, 0x18, 0x40, 0x1235, 0x10, 0xdeec, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x51, 0x8e, 0xd7}}]}}]}}, 0x0) [ 215.331922][ T25] audit: type=1400 audit(1647910214.466:230): avc: denied { write } for pid=5297 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 00:50:14 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:14 executing program 5: syz_emit_ethernet(0x22, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @remote}}}}}, 0x0) 00:50:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x1, 0x201}, 0x14}}, 0x0) [ 215.432127][ T25] audit: type=1400 audit(1647910214.466:231): avc: denied { setopt } for pid=5297 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 00:50:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="b805000000b9510000fa0f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f216ec4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:50:14 executing program 2: mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3) [ 215.549524][ T25] audit: type=1400 audit(1647910214.756:232): avc: denied { node_bind } for pid=5316 comm="syz-executor.1" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 215.605821][ T25] audit: type=1400 audit(1647910214.776:233): avc: denied { connect } for pid=5316 comm="syz-executor.1" laddr=172.20.20.170 lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 215.662878][ T918] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 215.772991][ T3680] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 215.912862][ T918] usb 5-1: Using ep0 maxpacket: 8 [ 216.033161][ T918] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=ad.df [ 216.045043][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.065294][ T918] usb 5-1: config 0 descriptor?? [ 216.133020][ T3680] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=de.ec [ 216.142075][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.153929][ T3680] usb 4-1: config 0 descriptor?? [ 216.194890][ T3680] usb 4-1: selecting invalid altsetting 1 [ 216.201266][ T3680] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 216.322866][ T918] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 216.343281][ T918] peak_usb 5-1:0.0: unable to read PCAN-USB X6 firmware info (err -71) [ 216.397631][ T5] usb 4-1: USB disconnect, device number 3 [ 216.404409][ T918] peak_usb: probe of 5-1:0.0 failed with error -71 [ 216.424005][ T918] usb 5-1: USB disconnect, device number 4 00:50:16 executing program 4: clock_gettime(0x0, &(0x7f0000000000)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) sysfs$3(0x3) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0xff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000740), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x2710}, 0x5}, {{0x0, 0xea60}, 0x0, 0x7, 0x1}, {{}, 0x0, 0x961, 0x40}, {{0x0, 0xea60}, 0x12}, {{r2}, 0x2, 0x0, 0x2}, {{}, 0x11, 0x0, 0x7}, {{0x0, 0x2710}, 0x0, 0x5}, {{0x77359400}, 0x16, 0x0, 0x4}], 0xc0) 00:50:16 executing program 2: mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3) 00:50:16 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) 00:50:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x134, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@loopback}, {@in=@local, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x134}}, 0x0) 00:50:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:16 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x73, 0xf2, 0x18, 0x40, 0x1235, 0x10, 0xdeec, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x51, 0x8e, 0xd7}}]}}]}}, 0x0) [ 216.862044][ T5337] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. [ 216.871286][ T25] audit: type=1400 audit(1647910216.066:234): avc: denied { read } for pid=5340 comm="syz-executor.4" name="loop-control" dev="devtmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 00:50:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000101ff4f00fa0708e7ff01000a0000010c0019800800010004000000040001"], 0x24}}, 0x0) 00:50:16 executing program 5: syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000082505a8a440000102030109021bed0101092003090400070207010340090501"], &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x1, 0x7, 0x6}, 0x2d, &(0x7f0000000080)={0x5, 0xf, 0x2d, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x1, [0xffc000, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "39dd2f4561164fd6544b3f09b4ebaaa0"}]}, 0x1, [{0x0, 0x0}]}) [ 216.993864][ T25] audit: type=1400 audit(1647910216.116:235): avc: denied { open } for pid=5340 comm="syz-executor.4" path="/dev/loop-control" dev="devtmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 217.152177][ T25] audit: type=1400 audit(1647910216.116:236): avc: denied { ioctl } for pid=5340 comm="syz-executor.4" path="/dev/loop-control" dev="devtmpfs" ino=643 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 00:50:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getsa={0x28, 0x12, 0x53e64c6cc1d47aff, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x28}}, 0x0) 00:50:16 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 00:50:16 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc4, 0xce, 0x68, 0x8, 0x2b73, 0x17, 0x1d3c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x3, 0xff, 0x4c, 0xa0, 0x0, [], [{{0x9, 0x5, 0x4, 0x1}}, {{0x9, 0x5, 0xe}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff}}]}}]}}]}}, 0x0) [ 217.329288][ T5353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:50:16 executing program 2: mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3) 00:50:16 executing program 0: process_madvise(0xffffffffffffffff, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) [ 217.402895][ T3680] usb 6-1: new full-speed USB device number 3 using dummy_hcd 00:50:16 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) setpriority(0x0, 0x0, 0x4) getpgrp(0x0) syz_clone(0x2200000, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) syz_clone(0x41000000, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="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") syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002880), 0xffffffffffffffff) [ 217.470527][ T3678] usb 4-1: new high-speed USB device number 4 using dummy_hcd 00:50:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 00:50:16 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) setpriority(0x0, 0x0, 0x4) getpgrp(0x0) syz_clone(0x2200000, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) syz_clone(0x41000000, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="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") syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002880), 0xffffffffffffffff) 00:50:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) [ 217.683098][ T5] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 217.814791][ T3680] usb 6-1: not running at top speed; connect to a high speed hub [ 217.866984][ T3678] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=de.ec [ 217.876565][ T3678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.889398][ T3678] usb 4-1: config 0 descriptor?? [ 217.893039][ T3680] usb 6-1: config index 0 descriptor too short (expected 60699, got 27) [ 217.915164][ T3680] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.925104][ T3680] usb 6-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.938403][ T3680] usb 6-1: config 1 interface 0 has no altsetting 0 [ 217.952873][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 217.955571][ T3678] usb 4-1: selecting invalid altsetting 1 [ 217.965967][ T3678] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 218.072883][ T5] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 218.081256][ T5] usb 5-1: config 0 has no interface number 0 [ 218.087694][ T5] usb 5-1: config 0 interface 105 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 218.099032][ T5] usb 5-1: config 0 interface 105 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 218.109673][ T5] usb 5-1: config 0 interface 105 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 218.174875][ T3679] usb 4-1: USB disconnect, device number 4 [ 218.184862][ T3680] usb 6-1: string descriptor 0 read error: -22 [ 218.192098][ T3680] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 218.201672][ T3680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.273051][ T5] usb 5-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=1d.3c [ 218.282156][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.294346][ T5] usb 5-1: Product: syz [ 218.301111][ T5] usb 5-1: Manufacturer: syz [ 218.306330][ T5] usb 5-1: SerialNumber: syz [ 218.315317][ T5] usb 5-1: config 0 descriptor?? [ 218.450865][ T3679] usb 6-1: USB disconnect, device number 3 00:50:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000100)={[], 0x0, 0x14}) 00:50:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) [ 218.658301][ T5] usb 5-1: USB disconnect, device number 5 00:50:18 executing program 5: signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() r1 = syz_clone(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 00:50:18 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) setpriority(0x0, 0x0, 0x4) getpgrp(0x0) syz_clone(0x2200000, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) syz_clone(0x41000000, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="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") syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002880), 0xffffffffffffffff) 00:50:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)='q', 0x1, 0x2}]) 00:50:18 executing program 3: syz_clone3(&(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_clone(0xa4840000, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) 00:50:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x183201}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:50:18 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) 00:50:18 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) 00:50:18 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x17}, 0x10) 00:50:18 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 00:50:18 executing program 3: socket$inet(0x2, 0x2, 0x100) 00:50:18 executing program 2: bpf$BPF_GET_PROG_INFO(0x12, 0x0, 0x0) 00:50:18 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) [ 219.454788][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 219.454803][ T25] audit: type=1400 audit(1647910218.666:241): avc: denied { read write } for pid=5415 comm="syz-executor.4" name="nvram" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 00:50:18 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) setpriority(0x0, 0x0, 0x4) getpgrp(0x0) syz_clone(0x2200000, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) syz_clone(0x41000000, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="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") syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002880), 0xffffffffffffffff) [ 219.577456][ T25] audit: type=1400 audit(1647910218.696:242): avc: denied { open } for pid=5415 comm="syz-executor.4" path="/dev/nvram" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 00:50:19 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:19 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:50:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x7000000}, 0x0) 00:50:19 executing program 5: bpf$BPF_GET_PROG_INFO(0x17, 0x0, 0x0) 00:50:19 executing program 3: syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 00:50:19 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) [ 219.882205][ T25] audit: type=1400 audit(1647910219.086:243): avc: denied { ioctl } for pid=5429 comm="syz-executor.2" path="/dev/nvram" dev="devtmpfs" ino=620 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 00:50:19 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000080)={0x0, 0x0}) 00:50:19 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) r1 = syz_clone(0x40001100, 0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x0) r2 = signalfd(r0, &(0x7f0000000940)={[0x7]}, 0x8) syz_clone3(&(0x7f0000000980)={0x20a001700, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x21}, &(0x7f0000000300)=""/244, 0xf4, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1, 0x0], 0x7, {r2}}, 0x58) getpid() 00:50:19 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x40001100, &(0x7f0000001000)="e5e19ec75e500e390d464273f6578b2d42957becd640a913f317d0dc6be9f028c54dbde83176ec93b9c2c5e0a7bbd0bcbf1e36c74c3a03342e82a322323ebf4653b8528019a3c298730ae8baeb577ddf896b83ab05b60758426fd1aa519822a9086aad96cd2e16b6ee7304c38dc71f5aa519f37f36988e60d4b66f32fce56df783c7565d4a73183fa6478705577ffdbd084adabc895b918a474e113e298680f4ecd3183f25b4c66601daa42d1b091ac652e47a754765291e8ef7a450c62b6b98e1f6f5dbea42cf223ac4f18cccc63e34aa17583b39211f9d1964951543a2f1f2b7dc6d3f40a58d15639655bbb1523e72e1e8c9aaf940f2c6fb9578259cec858d6ee2061e62cb90ad1348411b44d0fbe6f013ea6e27b0dc1c2f632b680c471a98cd633f3c4ac9bb3f4c1bc5a7f0e5720d171d127c0acfe583abc0143bca7da9531bbfbf42c33ff635e2e2df93d0f5046a3b84f5e3fb260658656706c8354db3130fba40e41fb394b3ee7a0dbd414fee36d675e6cd2f8537493a017c1ef7001d34db303b3bd802464fbcf9dae10e3187b01de5c9c43248a56a705ae191d324260308b793c099c1e24b982b0445f007db6b4a4043a108e0749755d76401789aad18ef715f77dc3001351976a6002d900d3e18aa3e69b1b7658a92c54ae1a1c7f35e5c724cd1461e5e22ddffe411f407469ec58686aeed5a382ee1b3587bbae36555a83c866441e728b32c91e6ed6201de1650d429d6eaaabcc1c83636db65afaed11fe6cbab0b22d82f8135e3b6622901bcd5805c683adfdb4820227de0699e8fd62b116d79c6fdad11422275793c678494a113dd181ba2d49c271c5935cb4023ea4bd94b53330a60139ea8dafc1fc17af6a98ba61625c9c688cbbe5679a63177b383935e17431b19f00b00e123d9c7bcdd5212f88876dc3775d1601b0c20ce77db696f66e267f5e018745914cce85004b06f8c629877a11a24ba6ad656dd13b1e3d5f8d711d01e97630a599bf2c897f45231e2f095106a90d6eb88a8a3e59b8890056f0789ddc9f60bd21acaa2609e85fba9362ed62dd8a8a671ef3e0d9875fb3272dec5ab62b3c1390886e07484d5a9b73923b1ceca6b05b7abd1e2ac18cd99c00c46af1419bacdf685b9c203a1a4e458e9772204cd2ac0f193164a2758541bb89843bf9d0dc8f53ede75de2e33a81171bff4bc67b9b8c4a9a6ba471266c2f5f276a7313fe4ac4fe8e468379e06c72614fd354773040f268f77ca10e7443a594859e8c7f1dfe00912a39066475e193f8ed1950f68e7299ec4b1203caca0821ad89c1154bbc76c121957b1f3eb022438b35f5e5362096d4d467f7b224a1a9c64136aaf70824b0b55089fc82717a5cc498759bcc506970768d264877792f2e6ccd0836c1ec99857ba4ccfc66ab7d46d4ca576ce3339d182346766b3ab9dc687a28db33cf7c8970f2441d176352e1573e04673b680ce8cd74a16116c87590f31ed9929999a8efecca01e2d52d1103c260bb26a4bb061cb7e455fbbd09a64cb950340ca354969232c4d9ef178273f2e9ff2e13e1ef2adf745f6d7f137f1981198fdbaad4659fe4ee26cf03a8da7aa1345d845c7a07e1ceaa06d171f1b449c4eb49945fac8e15396dc3fa7c55a80731045f62ec9b65001d0bb2829352171cfe6eeef6aa03e0fd666943be1e7269979132517bbec792a705d9c083935b1e7be2b260e848dabb2866d6981ebee5a77410b94920d9e11c6954b129420c6f642ce481d7fcc1ab7d40921b0f873d246aa5059afc41ee27bf494a6cfcc8cacead28b854c48b515ddb09b2eb29ba9c17b8094eecb38111a15d56e69b134deaba7cc1341c657b63e4ac750ec233a556fac5f50f103841e7c192faaf98ea28ca7d5f5b6acc4b7102172d48d2bc28a177a8572fb035091ac77f90b7642cbd2be8d3085c0b42ad264bf04ca5460b97ffe5dd2ab756dbb5037dd5f142369539917c11d39c077ad06e58b77b497d7b797f2d0e11ee641320d82bd1dcdae7d56ced2bd1082d9c72cfe8f7288535ec9c6fa079f134fa477f75faf5f5da5c98e2a3de29b2f38003b09188e631db90e1cac84eda26d4fed85523a0cbad51eb69694f9f8b6ff41bc7b64ddecf66602a575542437b02d3ea0e787ac51622a1fbb33c074a9930ef24bd37487602f3736bc00b8e8233d9fd6d5afbeffa813683fba097cf91b24e3c59a3152dfa3c08a98207abebad3a7d3be72df8b4db07304515e5854f59fdce63f5137bdd4088a9ae3c701b3db7152128cca24f86a2ddf54aca6106029f1ca26233982a5de44e86ec1a385660ca335c25e9b339570451a3fd2562cabd0906be52cbaa75a5579d078ed13ef0a72c66a932d76e6836070303bd980161c1753c26b46e97b4473d8b80686f0dacaf4c04be54fb178ba0d3dad64364ba4bf9dec3f90ab613d75b10df5b85cf3abfb1b786f42d94c45144fe02ee13aa3af8ac4a308e70a9ea21e9835d49b28b492d53bbe53367252027293a6a34668d3619e7e5a5821fc248fd7f14c8f710085506fa15cd02d870671ea3074d959a7945809f11ed4255e02fbbe428c53c5efac238a68e8759c24d02fc4607db48620e3330ede81cae9a1078f5f576867470e730e50c8c7e687379900fbdbb7847f2e8a96cd3f885c249d12166cae7f0a90efdb58ab09ea6c4bba1104bbb6f859bedd2b55b945b84b02d5a0618b4caf90e290bf7a6700403dca361dbe2c78d193ff23e6a19296199b5f4ad93a9e9481e304c90442a03491d93566493a0cf0ead2c47dc9bcad8981f0d0a504db4a1ecc4178b9960423befbbfea06191d8dac8e6c0adbc6474413dd96a90251fa4cf9da57e379115b467d958527cd4bd0afa15552a24aa50b61a8f9ced60f3a7f0001062ff6a532995ca61d6ea8c6741bef8651aa353a8faf8e513d8b092ec310897993929368c441ddf7948b2413e45436cafc61727c85401c831ee7b758a0350cb056e4b72c963857468fae088a898e3cb0b9938603413383fa5cd6d8d30a0d885c0beebb3b2f427ff17d2733fa4cd01514c1e84a4af85752c72dce31e5ec64e35e7683f2df57e90f8dec8c0974b42baf3bbfb4e140e8146f06dd267c1b6eda9335036b77c625997d04e82b28296ed2a4cc73d68faad9646c91ffb7fc6fe9ee1851d9599468032fc951be444e6cd99a4c90390c14cee542d5b429e1eba5ad7372077d06591dcbd0b90a7d70c31fe9d45abd2a1630648f2e72993f00cc11498f43875a5cd993256fff21f3df1e8788f48d3daf6a65424af23748e5ad1a0a03e9ccfc7c090629e68acb06c17f645574d75f69a775cc36174e0581007b95c2b503ec6b9f988a270e5b7cdbd754590a5a13c9b3549d4d8b8e35b6b29fb1ab2d19608088402b930c53b1d5dfcb8a5ddf44f53dfc3665964f9439349dc6a28635f60b13a26887d7f76e83bf3a3cc9f30215b0c46112fda3d51266c89058d62e1004138318a207c2544f39dd37ec655e161c6ab64ab9829a015df3d905610dc83b3fda8024d704c66b03856e57fd4a720d73a4a510aa9736bfbdbd74819cc019efcd64e6fc201b9cd4484d4215f1f3180963daec449b7c2a40bf5e66d3a6dcba9d598868dca02fdf35a6306204727567164b56802e591fd9a24fd3f88111c4852363d212597f2724fc476eb03308d0b3332791965b6986e5cc712a9da89d6a82b64fc0d13ac18beede915ecb9a072749e19364a542be42e32f32700376aaad64938a5a15cfe34a427f24eadbd32047771f4808e6d133766622bce103136ad4b821efcd6ed18ec9ce5b907130c829ebb66a8a2cd61004db035d388b07dd21f421943722611b46ca29390e6aad583e6160b79f40c43cab290a0488d334390ec5386923a5c6c23974bdc944dce4562d9407150b55ef420d214ebfc2554c9b252f305e7257021c939d768ea9cc4b610da635ce1a7d9fa6b1015c84e8b853203c6e0f87e4f70ff0af12434fd93d634efecf06286ffe54dcb330dab99a13c162bb6fe4500463a75a87ed87dcd21824b7c560305ebdaf634c6693f60a3e1c22da15f47561a79a991362c3a4b19c2a341a18608a6c8aaa7dfb50f2ef7e0d04f70b9bd4389270d7ecff9e97d5099f3291f756c835ed881797c53a488c8d715c33c1813a527b09150562da399f4cad87e8c492cf292cf84e3716475b00e5a996f33044bfae6b6e779776a88e0212b8b566de327bff7ca700d5b5b89355b76ec41c4c09e98e7a171fc905683f365eb55eb3ffc46ca47c5e61a2fd28d0c45202787aabf9b3cafd211ff758cae419bc43829089651831450f36b91519377289f5725da3373cb63ae29d9642ae7355acbec5f040859a842cf19b41c8734a13a042b242c45bc70a4503f0232be07a9bdd3e086abfac2e7d58f5aa7452f2bead449a469ac077de4ffec3a3ac836802673f57813114cd2dfdd93b94de34908c03640f02fedbf7d2fee3f4f3861d2a302896ae70086a8102ea84e9f106461f783a24dc97b3a2bbdbeb98bf9b7116ed5e45d3fb22903b91356d7a0da0716fe9c00510764a2f852f158579edc988f8a1353a92447531fb578da042d013b955b88cbe3582bb2b108c970f89d6bcd0b800fb137aa24a983c948109d783fef1fc7bce62f240b9711dd37c8d934acd3331c6f62b54c33341a396af1e5529f72ffc33ce4151484a60b17d87ac68677051ffdf437080f3a2ca9b0497f3567ba6da416cb878dd7ff2fffe05bd03a8d1b85d7b3d3113577d26086f5963dd169bf333304d2f395e338aa490efdc8defb0f7c608ef694d5611e5a7a866adad6a7c624a5d84c48750f7aaa16d83ddb4e1d04b848e47d3dbdda17251fdaafdfb6de249d03a4e04eac2a970d2c4d96553efe7904c8e34a6540c3d004e7802ec39a84822e7d7aae36884f01dfca52f06961514a6b3d3338e71a23bab6547e6b98210236ac5d9eb90b447963c81cccf90201119bc1357ed8d955d6814b281d9c18497a06e820a018d8885d7d50b1a77e6fd13ed8861cc361b1a0f7a287d04edfda985e281e47a8cc6dcd4ebb7638563451a8cccc16ed88a36e1f906ae29922d7c0354693d260a9335fbdf450fefd48592110b7645ab4281a2172e3b32f1c36aa93a620a73b6854b018316d0f8d202232360fe35934bfd1566ec7de1c41409a920229c26690de03f62f242c86e88dfe41de88f0812a5f8d1da704516e8eb27080709a67c1114f7d85a731e90e437adc4b443fe5e0674b1b4eae228cb14307ef257be48995ce23e4ce1ebef53d7c1c65751eafc4cf4a64fd91222bf052132cad32cdfd2a9f3db446036f380a539865c1ae49d7703aa88ef0a132663b79ea602cfb91409021f0232cf27b271f51bb66e5dc559443211856f68466183a767109c4fe5600ab35ef84b8c3c2c905aa9aead197376974f6a7a85b0c658204a1cb2bb130387ea9f85162664486c64b532bfb5293c05da1139f62606a6af9d2ade4c83558f6a940968422710e39557e7ad50c540f73d842f3da47c7c76564749129c68b141798af6648f7fcb57b834c74175919056898a0d7869ed23b0e3e5e5930a8c76d7746435e25412b149b8f03715e6f0e50cb0da5fda8d5128ecb2f14499549010a2cadef19137c2e0ee4916b36fa51f5b7f466e405f64d2a89a37fdd4fb7f277404bc675f97522a1460621a6aa78fb5a7880eaf1d2d8222173c1494f3f6373159165280c0d3e5d6f4f4d6d0d38963806822a8fc994fad36d92434ef724494b95a976da1671ae83052d0cb51a1a40d40a2e5fa75b167", 0xffd, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="673cbff194679c839a0114446616640def5ccbe9824b3314a1a7b2dd03b3f9a5d47868b49877add4a6499344f7b38e2c867235f8c36a52a2571d6a3478422bf30f7f65b13ec2ea7d1f0614b73143584b41feac98ffaecbcd454b643c19b5ad51bee3f0d4a30e93abf3c83382fd221f9028f4d467901f88e2eaa9e125d5b4c978f42229d9519a1f6ebb4e155fd853ac0383e9179b77b471a000713d8e4c29cd6b2adac7794e407e1c6cd84d40a4349adc006b5cda6345") signalfd(r0, &(0x7f0000000940)={[0x7]}, 0x8) getpid() 00:50:19 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f00000001c0)="be54f91a2729c84889a39be86ae0af53b0", 0x11, 0x81}, {&(0x7f0000000200)="266003693ef92b6e89c16cef481f872a8116a191ce5a624938143a3365a8b218ef574d9b5cb7de012f2eeb8c32246dc2e51b0071eaccb2c1dfe46db78c53413660cd8012b278778873e423b9b6dca7bffb4c857538fbbd7a7e84c07d316fccd82dfd68aaf218b2524db810aa97ad779890fcfbf16973d23919e1b6b7581709a7b5d4ced73288e21e772a3df01c5d24aad05ca941f5973fd034b9b58a2f35b508a9148bc04b29c2a36468837219eb167f9a15ecd282b7f5b83dd56a752fbd8be58d0d5ce742e3895227efba0969c13af9143faed71b65fdf9736e16de42a4", 0xfffffffffffffeb5, 0xed7}, {&(0x7f0000000300)="69fe6c104ae462d6c229d85faeeea237712b0f1976c29cfbcfb86730993285fc05fda0a7c9a1f03ae0148ca03f64ccf9c5149772c009861d16f6520a1f", 0x3d, 0x5}], 0x100002, &(0x7f00000003c0)={[{@uid={'uid', 0x3d, 0xee01}}, {@nr_inodes={'nr_inodes', 0x3d, [0x0, 0x0]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}, {@gid}, {@mode}]}) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001940), 0x0, 0x0) 00:50:19 executing program 5: rt_sigprocmask(0x1, &(0x7f0000000400), 0x0, 0x8) [ 220.052326][ T25] audit: type=1400 audit(1647910219.256:244): avc: denied { read } for pid=5443 comm="syz-executor.5" name="renderD128" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 220.165193][ T25] audit: type=1400 audit(1647910219.266:245): avc: denied { ioctl } for pid=5443 comm="syz-executor.5" path="/dev/dri/renderD128" dev="devtmpfs" ino=623 ioctlcmd=0x641d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 00:50:19 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x4800, 0x0) 00:50:20 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:20 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000040)="441009090000159e0000000000", 0x22) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x0) 00:50:20 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6000, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:50:20 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x101501, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1'}, 0x4) write$FUSE_DIRENT(r0, &(0x7f00000000c0)={0x10}, 0x10) 00:50:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002c80)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 00:50:20 executing program 4: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa03b9abb96104d7b, 0x0) 00:50:20 executing program 5: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 00:50:20 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000000400000008000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) setfsuid(0x0) 00:50:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}]}, 0x28}}, 0x0) [ 221.041874][ T25] audit: type=1400 audit(1647910220.246:246): avc: denied { append } for pid=5477 comm="syz-executor.4" name="nvram" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 221.182342][ T25] audit: type=1400 audit(1647910220.386:247): avc: denied { prog_run } for pid=5476 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 00:50:20 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) signalfd(r0, 0x0, 0x0) sync() ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x800000) 00:50:20 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x40001100, &(0x7f0000001000)="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", 0xc00, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)="673cbff194679c839a0114446616640def5ccbe9824b3314a1a7b2dd03b3f9a5d47868b49877add4a6499344f7b38e2c867235f8c36a52a2571d6a3478422bf30f7f65b13ec2ea7d1f0614b73143584b41feac98ffaecbcd454b643c19b5ad51bee3f0d4a30e93abf3c83382fd221f9028f4d467901f88e2eaa9e125d5b4c978f42229d9519a1f6ebb4e155fd853ac0383e9179b77b471a000713d8e4c29cd6b2adac7794e407e1c6cd84d40a4349adc006b5cda63455d93c4790590230484a5780355cf97bdb12f8ac131255b7d8b5aa4792aa3fbe59d15b086358599c1") getpid() 00:50:20 executing program 5: bpf$BPF_GET_PROG_INFO(0x18, 0x0, 0x0) [ 221.397264][ T25] audit: type=1400 audit(1647910220.606:248): avc: denied { append } for pid=5486 comm="syz-executor.2" name="pfkey" dev="proc" ino=4026533380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 00:50:20 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:20 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) kcmp(r0, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 00:50:20 executing program 5: syz_clone3(&(0x7f0000000380)={0x4102000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 00:50:20 executing program 2: setpriority(0x0, 0x0, 0x4) getpgrp(0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) 00:50:20 executing program 4: socketpair(0x1, 0x0, 0xffffffff, &(0x7f0000000000)) 00:50:20 executing program 0: bpf$BPF_GET_PROG_INFO(0x16, 0x0, 0x0) 00:50:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, 0x30}}, 0x0) 00:50:21 executing program 2: syz_clone3(&(0x7f0000000540)={0x20000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:50:21 executing program 5: syz_clone3(&(0x7f0000000480)={0x11b00, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:50:21 executing program 0: r0 = getpid() process_vm_readv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/218, 0xda}, {&(0x7f0000000140)=""/192, 0xc0}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000400)=""/205, 0xcd}, {0x0}], 0x4, 0x0) 00:50:21 executing program 3: sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:50:21 executing program 2: bind$alg(0xffffffffffffffff, 0x0, 0x0) 00:50:21 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:21 executing program 0: bpf$BPF_GET_PROG_INFO(0x13, 0x0, 0x0) 00:50:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0xa8, 0x178, 0xffffffff, 0x220, 0x178, 0x2f0, 0x2f0, 0xffffffff, 0x2f0, 0x2f0, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'wlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'wg2\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="f7e55b8dae1d"}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'batadv0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @private, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 00:50:21 executing program 5: r0 = getpid() process_vm_readv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/218, 0xda}], 0x1, &(0x7f0000000680)=[{0x0}], 0x1, 0x0) 00:50:21 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0) 00:50:21 executing program 3: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0xd2) 00:50:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, 0x28}}, 0x0) 00:50:21 executing program 0: syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002880), 0xffffffffffffffff) 00:50:22 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) 00:50:22 executing program 5: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 00:50:22 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 00:50:22 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000940), 0x8) syz_clone3(&(0x7f0000000980)={0x20a001700, &(0x7f0000000240), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 00:50:22 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:22 executing program 2: socketpair(0xa, 0x0, 0x7ff, &(0x7f0000000000)) 00:50:22 executing program 0: r0 = getpid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 00:50:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x7}, 0x0) 00:50:22 executing program 4: select(0x40, &(0x7f0000000000)={0x7}, &(0x7f00000001c0)={0x8000}, 0x0, &(0x7f00000000c0)={0x77359400}) 00:50:22 executing program 3: socket(0x22, 0x0, 0x7ff) [ 223.683474][ T25] audit: type=1400 audit(1647910222.896:249): avc: denied { create } for pid=5549 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 00:50:22 executing program 4: syz_clone3(&(0x7f0000000200)={0x44040080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:50:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:50:22 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x181102, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002dc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:50:23 executing program 5: process_vm_readv(0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/218, 0xda}], 0x1, 0x0, 0x0, 0x0) 00:50:23 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000007c0)) 00:50:23 executing program 2: select(0x40, &(0x7f0000000000)={0x7}, &(0x7f00000001c0)={0x8000}, 0x0, 0x0) 00:50:23 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000080)={0x1ec4, 0xd, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11c, 0x3, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "65c71e842dea66a16c5a337c2a85d804dc03635a936775354c7dbbe3028475dff5528d34835ef1334fad2c56510d4bf954db569db130a6f6d689fa004b8b6418369c893cb7393362fd787edd52a3e35a34feb87f88d0ae4b33dd5d45c78c2138fd50e36468d6e17e853a1057f83af4342516d41f2319716c438393c96c6c92a821af04777b67dc8ea3c548020aecc2b071b41456e61fbaa58322667ece6cd979234e17ce24078400e2a4790a040f5479c862085eaafe3b4a24d38cc8ea7d9c6c8e13798e01dea6f7f96d4fe34e9d5181cd8db7c74c178f27aba0e374ade6f470fa2809e07a"}, @NFTA_DATA_VALUE={0xb, 0x1, "d0140890d201da"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d84, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x88, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "6dacd996c5b77cf186b234d4ce8366bd58598a4b28a08b8e7ea4bd899a5972ef3ac305e756fd322486d8bc7a7962670555047ef34a8795be33587a4f8086972d715f9d3b84bf919e37d5bbdcbff7b26d3d14"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_DATA={0xcc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7ff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x15b5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "d8"}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd5, 0x1, "5ff9ce548051ee2550ec5fc97f531dfaf7aa6143779b17a9c0f302b0c1d36ea8e9612a8e918fe328cf9821978a451cf1f594768b6417b6c1a862ade9059a5b58c8fc2d10126d70bdecce8fce50f879ed95d1ca235b5657a7e70b7ab89d1ce15629d9243b837b7a7dcd458c9d65a3b58dcd131983a487aff2bccfbbf2e65b7093c066dbb2298788d44f4aa54c3b66bb5b0dca1f25d913eb39ec2eac93a74d799c4d6867e4639046c42d3daea409770635fd8118fbd40068757d054109d3069eae9db63d609bf412ee4b5dc03f518890a65c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x1f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x13c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "112cda494fda187e6084ee27e38910f255d0b287213a2a0854be797ca15ba342aa43af045f129967c08861f3b274d73aaaa60b75a76a1a962bf872bd18c7207acc566e314b21da7896909415e69b678cbc78f6c9e000f4c0526fa39828"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8e1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x31, 0x1, "681dad2593d807f0f1a450510111f518a8c24da1bf8b5395a2d32f36c4461db6186fda2ea63d77d9ea931e6acf"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "de08cbe2e07efd94e2dd4d980d1c9d6b1f9c40e97458667aefad6cf09455b9d7c04ff3f3d31e73b6a5f3dac625c3b29d10"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd0e}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffff7f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x17bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x350, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "3a345652a5b963fae354da53040c1a38a01105363e1ad524f1bcd23cb54435dd0e74646d38355a6bcc909679dd4810ae5c158caa2068cbcb53be7f2a2270542f609c0fd197d6b60602fba5ce6c8d4c6cabc49a49ff63"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1ff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x56, 0x1, "f34443e8122bc88fd0ee44977cd494445f1057a27e0eed57a0c40700339f2e590964bafcd0315f7f4809b2a1fe8f66b4fed545e6a078b1dd78903e5a73833101404f0bca9640811ff3a8e199a9ffede516f6"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffff7f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x11cd6a0c7e3cff21}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x25}]}, @NFTA_DATA_VALUE={0x62, 0x1, "adc53ed9874b829f2276a1376f9a3a3ecccca22323ff84c7f9b8d5c0be3d27912b2db66a0b669bcbbd7896a4d0de7dcec36e27c822f659a5e6be95f9727b7af69ea040fcf9a4ba5944f15f8798746631d4c9422a3591bda6d3786db8024f"}]}, @NFTA_SET_ELEM_KEY_END={0x254, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x87, 0x1, "c0da531935463ac0e249c1205c7f4f39d21dc106137bcdf552a87988fade54ab64d9941ad04794f0ee6fef1e4b276a3d08eb3c35c911c3b64cb3bd16670c0ae6ac5d886e3c3b33809d9b69e827511716191f5e01ec4e1ddf8bde4cceda0f72dca3217b633c3b494345ef25292390176f5d3c23357f997e234d399594eaa8fd9588a59a"}, @NFTA_DATA_VALUE={0x53, 0x1, "4684f6110a5e6532f8b740873f590cd449e57db2addd9ea847e94ba4bb52ffbfca7518a221a791df48ddedb3cf184d41310f5c585af094894e4e9d064dd6ee40ba608b7332671e7bf8c1c64033ad2e"}, @NFTA_DATA_VALUE={0xad, 0x1, "5fa8e164646500c7e7a2623a89fc5ceacb5bce806c067605e4687f0e2fe322c1417ac697a34f867dba2418a3aa9e4a4911c8108146ef3d914eff690a88cdbadc4d87d7949b3998a5ae86249c54e0232b19927eedd85c8188a05264792dc41ff290a6bf1d3d2f790cfad5e214438d05aca386bb40a1e77f94deb28e8af20aad2f524ab648786765a74aee10eb5e95d88cb1716c09d579388221eabbf7cd9db962eb8bf28f3e64848a63"}, @NFTA_DATA_VALUE={0xc1, 0x1, "95768ab187adafae84275cfd1f9e5936c21ecf346c0bd619dec3ef4974966d1a421a70b03251a6ebbfcc229dba5086c94546a7db836e9851f71c5811fc317797a149af25ec89ac67c7aaa617bbffa511b6632857c912d29fc237764143b300cd3e29fd047f5f75ace13cc2d47efc0d41fc06f00740b5d2b00aa3322e68eabaf94f8655e17718a8e8da82ae113a15078a5eb452256c0b54bc27312c7e2660c20c1dd00717b48e434fc62195f89a7d6f0bf105864dc3b35d6a958faebe81"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x120c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "b1a42b08e4e9cdc6d1e0322ad7247ce98a8251a8462b12cbcd1c8b04aaee81293fb1162906053001974058c07e3d1bb170d1137b58d7113fdd5d11f7a21c5b28f9461ff894d5a33b8ccab4e3ddfe37283f350715c0a0e1865b6a436f5862a8c94b8100b2682284b2dd26a5c5216631f1a96c93fe970144764bbc4f8c9283e5ced962b6f6a8f6e35f1f9cc7f369d2f16c44339ee92b2df29222135267baaeee69e507f4db526993dfe27ed6f5c9b113bbf67460e706e428735bf3399d83c7f72bfd3d0b5471d632b455dafb49514e361579ba802889e2b02c156fa24774be4d437dbfa397"}, @NFTA_DATA_VALUE={0x1004, 0x1, "a0e420c557d548bcb87740f102ba01369e06202d4bd2a7f574c827886ad803e3bc84281121991771215aa20b4c189a64b9f29345f87286e8e61387a399cc801ea8bf05410dbce4394dcd2561079cbca46d78fefe70a893451381929ab8979288991d86a53df0a69aa9e533e03f5910a39ca9d4e1b0bae12851c4571f74d39d8de2ec9121884d05aa953803f3bece4271a7eaf205fff0bec6fffa29c633f1e88664396d7a08731533366f83c00fc1bd210661dd497e75869cda95afc102caea1f4e7bf42d4bd84ac2b7273fd57d33f80b92d559633177e868dbe895fcb47b5ed6e31fe7b0a1984f567b3d522b2cfe1af65522c49bbfea3c274d638b3461ca4de3258fc1ba232ec1c64e975d6c959e64a54f0b3e15c940768273c76dd5ede24d5e1429141c9eef96abc58fcfb89a4703257b3b06d8a49c649791da4ed7eee3b987dad5bd515a7a89fab93a35aaa82f0a661557ba340b43fe8104f17c721b7c22b3d0736e112bfb36b236447b2352ab8b10c96b8bd289ee94d1a38ece01a7103942cd74cd51cb3b3d33d097ef69eb41ef29918cda134bc7ff1cd49c3e33f5550e9b3226280db76fc2d14158d13a06114ef97d0655c9a201b9342ccb4427fc9c8b7105e3601471beaa8db19b3691475d342e8fa6dd9df697594a74204ac3875b5a9dd0b33c8b54dbe37c6773eada730038ad6375a2cd7f7bfa054d2334358b4c9ae1e9bef5b607041eda1178907dc683dda04adf3eaf240936b6a1a100f04c771c3b9a19bd52d0bfb5d66a79ac964849d687fb98f00c479b2ca1ff3665026def22fe6fcc8a3cee1e57e4bf1bbcff0303525cce4f940b95d73a2c91a60fcbc09e5aaa4a351c12095400b6f944e27e2c1cb2c0baf1a0bae4d3f0ab7a5dcde5fb558e4895f27dad6ca060b62c45991b1a4174f33561b9c5c452232346583b88366b5f97e896cee8cf30014ce9f9fd45d0b2fa7c14302499b64ab5d552d4f28ad19999e81703ab92ba499c631960ac84800c40281ad9c511cf52e6fc5109baab64e5ea171a20c865ebfb41ef8378140891cacc0288c2b83b7c12a1e276903a1dcc5b869ce7d1f0aa4094af3174d0e443f6486da143c608742c8ea1f870c0399347b1a32b1b3f0c89876ecbeddee0767e244483ae11f47cefc9b92890bf00766011a720b9a6e34992a497f1a8df5262920187e5772133684a272a46a4484b4f1dc950e678eb9009b73a569d88c4ee12a5692543aab6894ae65380d7737e661ad0617a7bc7e9cf0d3ea97a7eb53a4a16672dfe7b0a849cca2149d038f2907b1c88fed3c84ec8f2b313404d4cdc5e7c03e4b840d175efa3cbda2bcdb2053e656c18c1f266caf083425094edfceb1acdf745365daa6353a3d635814e1a3ff2e8615395b94e0d9ce72b904c0c85b7944173a5ed540e7ba4f533142dea18168bc1ab095ea066ff28b1d06fab3ee3e23b47cb402f1a5503a23c9a92acfac9dbfcb9f7e0e082b97384a4db7932d71b5393a75181f07cdf32d1f9dd0320e1b8400d28a3fdd97fe253624d80d1caad358f04a9dbe9614955832f49b0c80e9f9c3fcb1388edde9c68cf3516ea6f4f4505571dd8c816a1a7f1305729402ec0700d3f29c4df5e1d8661dec474dc1ba5085642ed2afc631a3701765fdadb55dad61c7eeca04c83564ffdead70ed9b840a1b5f80d4d7b1f8c502f979d5dfe48eb7a7ade826d47c38313eb1cab0bb6d52e2b84ac4a21e3983574b221bb903e262485987749e7b3f29ac5a63f55d05042d6e10547848c047c950aad836f55adefe3702fcc10d0caa9104decf71272dd02442f37010f89077cbc581d7b2f4d4a86ba601435b62dd29dd9c9026d074dce54db485de33ca93e78ec20aad44d4ab5aacc19d36d5c4e52b666db93f9529a5fc8ff62d13cb8213135c8a6816b161a88fce46b8fab203ec7a745e8e53c541ff3f15cbdd1110fb0577f354c3dac953d8a16fdf03e7518576b10c844d20d7064b3c79c8b5eeb1fa04304a3a03572d24163a6d4ce991642638b0e0a3af1a75aa96d80eccc7efbd14e324e0a3cc61e1e3f5800e38645fd435d6b447072c91b28a714389f89033ecd9513b1e9c6bda2a5f6f10955069f021264f24413b03b9cf0c9cfe7a1a23bd3c25f4ee0f016cf2adc20f29a120ed396c3a11402505e5975762269ee3c2f4c8e4913b582eae2c2db9add4c09d0f63475667ba2c86e23220dff729ddf74b74c2e03ad7208fb832d5510de834fa3f6874fcc9efdd3323a2e46bc78db02b652d167afcff43f0b755738ee85ae8db217785dfd642b8fd62fa6a91de78a343bc74ecaf3ec7ff6c19beb8778efb29feb2699cecb07903701efbfc15070b7bded1943d11c6ad85c8da776a4064d67d4a955cc6b13c39e1d8386f497bf53122d53095e9ebf1e4cec585fbd21f10b727b1f890b4a0e593c11ea730bfc3508afa746e8dd63d60c740ceb62a3204568d5d5a9acc82d03acf430384aa4821682119712ac488c2c0fc80c7c14279b76cb1ea9bdbd2128730fe3a52fee00a638b5d9333bc806e1e43ec1a0537ff6f7d3746a5468b60dcffb91d73895d6fe6de751b27b3554a27f974a14d73d2044de9e3d99c1640c2f9516b6a00dcda1c3822660205931a93e0cdcd01a92dddfbe9e9c6967be72e61fe1387979058df76c69aacc88f2bcea1888e604e0e8e7f4aad6f6686d44954ffd05f8c58958c0c408f3d547448de84909d577097f7d58abc30c0c051b84d6c1879f206f213f3721a1c83e661566377a91848d45f966c404f20bb2484ff699e3b57edc86c592d53d9c1241e4fdcf38f19a1bfa66d9715e271fa13ac01fad97845ef6ba421d3c50be6f1385f82f72610797e7cd46b198d06ebc76c37928e565acc28aefb81ed2476ebc8244e44c0a763cb9f276a65dede2f50d1fe691b6bcb981c54a3e4f8232131c9b1e9ee7ac09dd6cf4da650f43c0fe5378a464d85b0781d456b5e4898f278878bc35a76d243a64a0e0f1f5649691239dcba0a319fa3368043f01adf0d26af1375534c00558a3edbf7469f5edfb63e74fd30747f7d558e9f15f7f0388cd4e0b0a01a9489447e2fce17d01b36ace84dced1918d15897e8846f99d57374ddb1b887f27f85e708d2d6a729366f15af2cb58f59904eecf3c87eb0d88fe8b9d4cf966aae0ff23c7c8abee8aea86b5b7d872dc1c51401f384e8f5d1bf65228a9eda601ee96f12f17d0dc7da567a60929eaae4c7637560edcdd9c82d73abab6b64341fc4057bcad5a77befc44a81a93ca576320590ad8db6606c938186c84cb3b84761eef242289639fca597e49b56b35c6e94b73de08674bc55b6a599f787593f7b0aa2d58f2675706db3c96083c5ac950c3cb0143301c617e2f886c85300d90ac67f244304557c4d36fb6fe5233f6f9126eae72e28a92b59c05afb8f70facd25913ae5bdba58f9730aac8c70f6ca18600b6f50e9a0e6e156acee2b7793b753789b26a0704079f2b2c891c27c75a58e07bb9076258ee9eca57ab8f68961afe81a3c2321f8045cd7dfb0b29638be94c9a1bcc44040a477608111dabbeda66ef4b43e4b36b49b5c46816c32fea7366fa207f686232bf5752e7653ce4e7a76ea81d2d6cc858fa1dc7654045459b101f1a4d2283911cfb8c319cc415ea44327086ecf7ab4ce17d1928a85995d2e9c802e2524166e808f2c024743d180038e9fdd74efac2d03cbc3d9b6e71e5d4d8d663e39f110e9c61999084e5bd61a7654503be37edd7bf93259184dd08d1eb2793ffa5dc6ecbc8c442a960c3806b7c1b92473c1a1a5428506cd0f5535372d4fd6f47f3d8d24e5b2892193b301f5de034254805940e9832b85900e0b1cba4cce1c6df84ee49c38f240135a74261acdd0c3296678f8f8f2e5abe5934190923a2d5f7f4eab4c018cf7293ffc3130c9a112163c476217adc7c5ea8839bf427df357bca0113c79912c654e86f4f32e05dccbd41aaa4c53bf7d78a3b0dc7e004cfbf885e98b99ad87652515de8ed03ed2b42ce99abac5746893e821c2f43fa48a290c4dae8286f5fc3b7ae319c517737b6b1c94be0bcc00843458f0a21d80550bacd77dee317c1fd37390792cb0a68faf4bd0f938d2a36d10d4ef42e36eb0ca4a9a65f8fd8ce15ab1e20ba6bf0f78b9640fa47ac5f2b2a528daaecf6cc0cf09dd9e9c5d10d8cf30355c80668c42ccabebddc6475e4dbfb998c6bb41b0970321b5bf3f86070116667c99985f865625ed154115221d46031564c17cf7968fa7aa2289b2f40299f89ee2e0200e5411ed02eb8ec99e5a4c743d86e74ab182396f3cdc551209e055a86d86fdb065d16a8f6c31a86beb74f489d8a0319ca6c879a7bbbfc8594179a8b107e436a3078c9c81f8b943855935d1a6d5d1a95e2a72b66e80f169edeb7d635c8238a8d38d992276517e4616b3bca237c44132f015405f4684a5791252046112c387a8604d66d094d4245a264d67700453eb59033155a205aae409fdd1eadda4cca722a4a705fd3bf129efdd8c006c5c5b0e80fadd394a95121693ab24a8eb16c914a96adad1b404a089e02c3b3b84c87c5d3927433f4329eb08396a2d85973fcfa35ee0544afef2da3c2b138fc2eb7ff3e175ccf177d327b30bc7ba541d7a0df0d1f005a78da2c8ae62e342d767c43a9de068e6ee1daa46252f3a64bd1e98da982338716b44363b651be09866893a9592f1b2834173dc8749b9ffc5d8e4c3d925119271b0003c9fc188908b83a8f1a1aaf9cae1889bce2d1432e6a205a8e11ea861c8d29e26a4e63721047f2932df7b0949fe935cc65864f344d603b7c4f81cc8f1a681760a338e4c60714d2dfd50b4d241ff4b102ae4d0e0d01cdf10d9011e8bb9116fe2c025e1d75e10f2988cb0510c5f8f43669c45a2c51b353d8b0f87625896886413a250bd107d32286a2f75ec9bfe6c9a0cf852090f4c605e1b6db7a39befedb254f3e5d3d836d933a3ff290550a492a0c4c3fbc93d75a123111ca34531d5ec1c8c01f08c8cc2b0418046d02035ca7fbf71685caba64dfe4053af36f470fa60ce7330ea553202f681c20bde51725fde7a21034858f0245a679f67a0a0112c8911099899ca9c8bce22e21fe7d83de78e890740a8e6c24b3b858e1ca08f848a1ad8369a88d118a2fb85fc521d1ea48fab7a55d796e0c38c330e5f7edb4c0207fa6464c655c5959cafc278ab4ed1bcf98d4c49efb1ef4d15bab3c7d6af589909e407d8adabdd8923557515e27fd6f034173be1982ea6d3404cfc6ffce8338ab5321ddc891296210c32e9f92e464ca38b869ea473e9d4638a8f852ccb423973435eba00dd8c262d6973aec68c710b8ef5f31f08f6f890b7e134ab1e80a3f5ac72493aa6c1feedf22d532d247d78ff54b2cfca56d69602a3206ed5ea6c5d9a34de355a91256cfd3587793a7bd777b252a922a40eb65ad55e6b6c24075a4aadf4d14033c520f523941c37ea298be7938187f87a89ddbf4dd66445233f5d2dd7aa2eec3516a9085749a58d13ec52563e70ec7109f6e0e0ad005307b9a4942cb641dc0117bf8b12fbfba3249a979a136d3db48a3bd7414d9f7e956288a63b8474e24e6b3d4d868f7278dea03d5bb877595163ea6da2a7dabf1070c65b1ef6002738b907b561857f65c7d7c0752f4f77f27c88488ee335ed06daf70fe9aef14b0f3d490dfda8d7013635d4d7bc837d80157a738f6ee4e5ae6df649498388c7aafdc4a064d6df2ed8d0efc8d4cc37ced2b0543cb6afd6eb64c408286ade3cacdfd196dd16e36ca693a77fd648d8056058f898a0784252e3"}, @NFTA_DATA_VALUE={0x99, 0x1, "a7337b13a23f5b7697f389330c389e1024305f9b52877204f7c0e9339835404907cdd119696ea4847b7a6a4c0f86a6c56a107d62a229ed5d9d7355afa447e6e1c32347c638d1bbe43ae13612b0f7d5c9c482e69f152057231b08e3031f560ac402383a2599c7c694d3710cea2a4db844a88e14c15b70d8727ef56c51bdb4632f59fc48fbe46c3c20072b78f3620cf6c3ad3b15a4b7"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x40}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}]}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xef, 0x6, 0x1, 0x0, "6265c780cc26cb3938fa5a127d0d6c7e5b9032c7aab141d7847f830a708a361e8262b83bd699705b75ca9b94b7947e1d1cdc230e2fdb7055531c43112b772057413450eacbbbad9141507193bee24e6f70f8a1d566bef047a6ef1c864db5f74bc85081b03ab9e855753201e8d9794669c59a57daf15781b8fcf3e8a0f362e617967dba0877d92e85b2c4efa3d87918041361c21971a6567409e3dd7ccd402dec2ce3580a8c277d09cc1d0ff64fd4a857a7dd54652fd75439913dcbee739c83d1b0f39340137ee5ad153dc826ef5c7ddf24bf55589235cc6b1a2492578cb0cb09ccdff2245d143fcb663e5f"}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x1ec4}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) 00:50:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x0) 00:50:23 executing program 4: syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x5f105ec8d1cb6811) 00:50:23 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)=ANY=[@ANYBLOB="cc7e3d32636a"]) 00:50:23 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 00:50:23 executing program 3: syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) 00:50:23 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0x4, 0x0, 0x0) 00:50:23 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x0, 0x1}) 00:50:23 executing program 5: syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00') 00:50:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) 00:50:24 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0x22, 0x0, 0x0) 00:50:24 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) bind$inet(r1, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x400f00, 0x4) 00:50:24 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0x14, 0x0, 0x0) 00:50:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000080)={0xec4, 0xd, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11c, 0x3, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "65c71e842dea66a16c5a337c2a85d804dc03635a936775354c7dbbe3028475dff5528d34835ef1334fad2c56510d4bf954db569db130a6f6d689fa004b8b6418369c893cb7393362fd787edd52a3e35a34feb87f88d0ae4b33dd5d45c78c2138fd50e36468d6e17e853a1057f83af4342516d41f2319716c438393c96c6c92a821af04777b67dc8ea3c548020aecc2b071b41456e61fbaa58322667ece6cd979234e17ce24078400e2a4790a040f5479c862085eaafe3b4a24d38cc8ea7d9c6c8e13798e01dea6f7f96d4fe34e9d5181cd8db7c74c178f27aba0e374ade6f470fa2809e07a"}, @NFTA_DATA_VALUE={0xb, 0x1, "d0140890d201da"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd88, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x88, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "6dacd996c5b77cf186b234d4ce8366bd58598a4b28a08b8e7ea4bd899a5972ef3ac305e756fd322486d8bc7a7962670555047ef34a8795be33587a4f8086972d715f9d3b84bf919e37d5bbdcbff7b26d3d14"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_DATA={0xcc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0x6, 0x6, 0x1, 0x0, "d828"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xff}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd7, 0x1, "5ff9ce548051ee2550ec5fc97f531dfaf7aa6143779b17a9c0f302b0c1d36ea8e9612a8e918fe328cf9821978a451cf1f594768b6417b6c1a862ade9059a5b58c8fc2d10126d70bdecce8fce50f879ed95d1ca235b5657a7e70b7ab89d1ce15629d9243b837b7a7dcd458c9d65a3b58dcd131983a487aff2bccfbbf2e65b7093c066dbb2298788d44f4aa54c3b66bb5b0dca1f25d913eb39ec2eac93a74d799c4d6867e4639046c42d3daea409770635fd8118fbd40068757d054109d3069eae9db63d609bf412ee4b5dc03f518890a65c3707"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x1f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x13c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "112cda494fda187e6084ee27e38910f255d0b287213a2a0854be797ca15ba342aa43af045f129967c08861f3b274d73aaaa60b75a76a1a962bf872bd18c7207acc566e314b21da7896909415e69b678cbc78f6c9e000f4c0526fa39828"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8e1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x31, 0x1, "681dad2593d807f0f1a450510111f518a8c24da1bf8b5395a2d32f36c4461db6186fda2ea63d77d9ea931e6acf"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "de08cbe2e07efd94e2dd4d980d1c9d6b1f9c40e97458667aefad6cf09455b9d7c04ff3f3d31e73b6a5f3dac625c3b29d10"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd0e}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffff7f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x8c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x350, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "3a345652a5b963fae354da53040c1a38a01105363e1ad524f1bcd23cb54435dd0e74646d38355a6bcc909679dd4810ae5c158caa2068cbcb53be7f2a2270542f609c0fd197d6b60602fba5ce6c8d4c6cabc49a49ff63"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1ff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x56, 0x1, "f34443e8122bc88fd0ee44977cd494445f1057a27e0eed57a0c40700339f2e590964bafcd0315f7f4809b2a1fe8f66b4fed545e6a078b1dd78903e5a73833101404f0bca9640811ff3a8e199a9ffede516f6"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffff7f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x61, 0x1, "adc53ed9874b829f2276a1376f9a3a3ecccca22323ff84c7f9b8d5c0be3d27912b2db66a0b669bcbbd7896a4d0de7dcec36e27c822f659a5e6be95f9727b7af69ea040fcf9a4ba5944f15f8798746631d4c9422a3591bda6d3786db802"}]}, @NFTA_SET_ELEM_KEY_END={0x570, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "c0da531935463ac0e249c1205c7f4f39d21dc106137bcdf552a87988fade54ab64d9941ad04794f0ee6fef1e4b276a3d08eb3c35c911c3b64cb3bd16670c0ae6ac5d886e3c3b33809d9b69e827511716191f5e01ec4e1ddf8bde4cceda0f72dca3217b633c3b494345ef25292390176f5d3c23357f997e234d399594eaa8fd9588"}, @NFTA_DATA_VALUE={0x51, 0x1, "4684f6110a5e6532f8b740873f590cd449e57db2addd9ea847e94ba4bb52ffbfca7518a221a791df48ddedb3cf184d41310f5c585af094894e4e9d064dd6ee40ba608b7332671e7bf8c1c64033"}, @NFTA_DATA_VALUE={0xad, 0x1, "5fa8e164646500c7e7a2623a89fc5ceacb5bce806c067605e4687f0e2fe322c1417ac697a34f867dba2418a3aa9e4a4911c8108146ef3d914eff690a88cdbadc4d87d7949b3998a5ae86249c54e0232b19927eedd85c8188a05264792dc41ff290a6bf1d3d2f790cfad5e214438d05aca386bb40a1e77f94deb28e8af20aad2f524ab648786765a74aee10eb5e95d88cb1716c09d579388221eabbf7cd9db962eb8bf28f3e64848a63"}, @NFTA_DATA_VALUE={0x3dd, 0x1, "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"}]}]}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) 00:50:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) 00:50:24 executing program 4: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000007c0)=0xf4240) syz_clone3(0x0, 0x0) 00:50:24 executing program 3: socket(0x1e, 0x0, 0x8) 00:50:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 00:50:24 executing program 3: r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:50:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x1, &(0x7f0000000240)=@raw=[@jmp], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 00:50:24 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0x7, 0x0, 0x0) 00:50:24 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) 00:50:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 225.694513][ T25] audit: type=1400 audit(1647910224.906:250): avc: denied { write } for pid=5609 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 225.713511][ T5618] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5618 comm=syz-executor.0 00:50:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) bind$inet(r1, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x400f00, 0x4) 00:50:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 00:50:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"e8dd06485e2d85b43f8c82c6f6a48ddb"}}}}, 0xa0) 00:50:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000080)={0x3000, 0xd, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11c, 0x3, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xfc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe9, 0x1, "65c71e842dea66a16c5a337c2a85d804dc03635a936775354c7dbbe3028475dff5528d34835ef1334fad2c56510d4bf954db569db130a6f6d689fa004b8b6418369c893cb7393362fd787edd52a3e35a34feb87f88d0ae4b33dd5d45c78c2138fd50e36468d6e17e853a1057f83af4342516d41f2319716c438393c96c6c92a821af04777b67dc8ea3c548020aecc2b071b41456e61fbaa58322667ece6cd979234e17ce24078400e2a4790a040f5479c862085eaafe3b4a24d38cc8ea7d9c6c8e13798e01dea6f7f96d4fe34e9d5181cd8db7c74c178f27aba0e374ade6f470fa2809e07a"}, @NFTA_DATA_VALUE={0xb, 0x1, "d0140890d201da"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2eb0, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x88, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "6dacd996c5b77cf186b234d4ce8366bd58598a4b28a08b8e7ea4bd899a5972ef3ac305e756fd322486d8bc7a7962670555047ef34a8795be33587a4f8086972d715f9d3b84bf919e37d5bbdcbff7b26d3d14"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_DATA={0xcc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7ff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x15b5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0x6, 0x6, 0x1, 0x0, "d828"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xff}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd7, 0x1, "5ff9ce548051ee2550ec5fc97f531dfaf7aa6143779b17a9c0f302b0c1d36ea8e9612a8e918fe328cf9821978a451cf1f594768b6417b6c1a862ade9059a5b58c8fc2d10126d70bdecce8fce50f879ed95d1ca235b5657a7e70b7ab89d1ce15629d9243b837b7a7dcd458c9d65a3b58dcd131983a487aff2bccfbbf2e65b7093c066dbb2298788d44f4aa54c3b66bb5b0dca1f25d913eb39ec2eac93a74d799c4d6867e4639046c42d3daea409770635fd8118fbd40068757d054109d3069eae9db63d609bf412ee4b5dc03f518890a65c3707"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x1f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x13c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "112cda494fda187e6084ee27e38910f255d0b287213a2a0854be797ca15ba342aa43af045f129967c08861f3b274d73aaaa60b75a76a1a962bf872bd18c7207acc566e314b21da7896909415e69b678cbc78f6c9e000f4c0526fa39828"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x31, 0x1, "681dad2593d807f0f1a450510111f518a8c24da1bf8b5395a2d32f36c4461db6186fda2ea63d77d9ea931e6acf"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "de08cbe2e07efd94e2dd4d980d1c9d6b1f9c40e97458667aefad6cf09455b9d7c04ff3f3d31e73b6a5f3dac625c3b29d10"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd0e}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffff7f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x28e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x350, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "3a345652a5b963fae354da53040c1a38a01105363e1ad524f1bcd23cb54435dd0e74646d38355a6bcc909679dd4810ae5c158caa2068cbcb53be7f2a2270542f609c0fd197d6b60602fba5ce6c8d4c6cabc49a49ff63"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1ff}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x56, 0x1, "f34443e8122bc88fd0ee44977cd494445f1057a27e0eed57a0c40700339f2e590964bafcd0315f7f4809b2a1fe8f66b4fed545e6a078b1dd78903e5a73833101404f0bca9640811ff3a8e199a9ffede516f6"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffff7f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x11cd6a0c7e3cff21}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x25}]}, @NFTA_DATA_VALUE={0x62, 0x1, "adc53ed9874b829f2276a1376f9a3a3ecccca22323ff84c7f9b8d5c0be3d27912b2db66a0b669bcbbd7896a4d0de7dcec36e27c822f659a5e6be95f9727b7af69ea040fcf9a4ba5944f15f8798746631d4c9422a3591bda6d3786db8024f"}]}, @NFTA_SET_ELEM_KEY_END={0x1268, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x87, 0x1, "c0da531935463ac0e249c1205c7f4f39d21dc106137bcdf552a87988fade54ab64d9941ad04794f0ee6fef1e4b276a3d08eb3c35c911c3b64cb3bd16670c0ae6ac5d886e3c3b33809d9b69e827511716191f5e01ec4e1ddf8bde4cceda0f72dca3217b633c3b494345ef25292390176f5d3c23357f997e234d399594eaa8fd9588a59a"}, @NFTA_DATA_VALUE={0x53, 0x1, "4684f6110a5e6532f8b740873f590cd449e57db2addd9ea847e94ba4bb52ffbfca7518a221a791df48ddedb3cf184d41310f5c585af094894e4e9d064dd6ee40ba608b7332671e7bf8c1c64033ad2e"}, @NFTA_DATA_VALUE={0xb0, 0x1, "5fa8e164646500c7e7a2623a89fc5ceacb5bce806c067605e4687f0e2fe322c1417ac697a34f867dba2418a3aa9e4a4911c8108146ef3d914eff690a88cdbadc4d87d7949b3998a5ae86249c54e0232b19927eedd85c8188a05264792dc41ff290a6bf1d3d2f790cfad5e214438d05aca386bb40a1e77f94deb28e8af20aad2f524ab648786765a74aee10eb5e95d88cb1716c09d579388221eabbf7cd9db962eb8bf28f3e64848a631464ce"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xd1, 0x1, "6152eeab7621d37f783b984a8ee7a3fa319903c1742480267692c375cd5f21748845a546b9c6f28bbfad4fd533de5e13a640a53be9308c994750a2bb2b2343fcd027b8cfb466e63eb5a76929bcf732d8025affa28286683d8d231b8173f3f09462fe29165ca57f8576da764d536d48c1180ff42855bf7a6be6a936576f484af0c706e740b24d32c07d2f9926624bd392d9c0696dd4f69d5e64c2df5d6dbab4518b3301971e3abafa9bb6fc5b026bbb0d2d203d80338de1d5426e1741e18553aa3c0b8f0320947ea063c53a4c69"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x100, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '--\x00'}, @NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_PREFIX={0x11, 0x2, 0x1, 0x0, '/dev/udmabuf\x00'}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_PREFIX={0x8, 0x2, 0x1, 0x0, '-{)\x00'}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}]}}}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x121c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "b1a42b08e4e9cdc6d1e0322ad7247ce98a8251a8462b12cbcd1c8b04aaee81293fb1162906053001974058c07e3d1bb170d1137b58d7113fdd5d11f7a21c5b28f9461ff894d5a33b8ccab4e3ddfe37283f350715c0a0e1865b6a436f5862a8c94b8100b2682284b2dd26a5c5216631f1a96c93fe970144764bbc4f8c9283e5ced962b6f6a8f6e35f1f9cc7f369d2f16c44339ee92b2df29222135267baaeee69e507f4db526993dfe27ed6f5c9b113bbf67460e706e428735bf3399d83c7f72bfd3d0b5471d632b455dafb49514e361579ba802889e2b02c156fa24774be4d437dbfa397"}, @NFTA_DATA_VALUE={0x1004, 0x1, "a0e420c557d548bcb87740f102ba01369e06202d4bd2a7f574c827886ad803e3bc84281121991771215aa20b4c189a64b9f29345f87286e8e61387a399cc801ea8bf05410dbce4394dcd2561079cbca46d78fefe70a893451381929ab8979288991d86a53df0a69aa9e533e03f5910a39ca9d4e1b0bae12851c4571f74d39d8de2ec9121884d05aa953803f3bece4271a7eaf205fff0bec6fffa29c633f1e88664396d7a08731533366f83c00fc1bd210661dd497e75869cda95afc102caea1f4e7bf42d4bd84ac2b7273fd57d33f80b92d559633177e868dbe895fcb47b5ed6e31fe7b0a1984f567b3d522b2cfe1af65522c49bbfea3c274d638b3461ca4de3258fc1ba232ec1c64e975d6c959e64a54f0b3e15c940768273c76dd5ede24d5e1429141c9eef96abc58fcfb89a4703257b3b06d8a49c649791da4ed7eee3b987dad5bd515a7a89fab93a35aaa82f0a661557ba340b43fe8104f17c721b7c22b3d0736e112bfb36b236447b2352ab8b10c96b8bd289ee94d1a38ece01a7103942cd74cd51cb3b3d33d097ef69eb41ef29918cda134bc7ff1cd49c3e33f5550e9b3226280db76fc2d14158d13a06114ef97d0655c9a201b9342ccb4427fc9c8b7105e3601471beaa8db19b3691475d342e8fa6dd9df697594a74204ac3875b5a9dd0b33c8b54dbe37c6773eada730038ad6375a2cd7f7bfa054d2334358b4c9ae1e9bef5b607041eda1178907dc683dda04adf3eaf240936b6a1a100f04c771c3b9a19bd52d0bfb5d66a79ac964849d687fb98f00c479b2ca1ff3665026def22fe6fcc8a3cee1e57e4bf1bbcff0303525cce4f940b95d73a2c91a60fcbc09e5aaa4a351c12095400b6f944e27e2c1cb2c0baf1a0bae4d3f0ab7a5dcde5fb558e4895f27dad6ca060b62c45991b1a4174f33561b9c5c452232346583b88366b5f97e896cee8cf30014ce9f9fd45d0b2fa7c14302499b64ab5d552d4f28ad19999e81703ab92ba499c631960ac84800c40281ad9c511cf52e6fc5109baab64e5ea171a20c865ebfb41ef8378140891cacc0288c2b83b7c12a1e276903a1dcc5b869ce7d1f0aa4094af3174d0e443f6486da143c608742c8ea1f870c0399347b1a32b1b3f0c89876ecbeddee0767e244483ae11f47cefc9b92890bf00766011a720b9a6e34992a497f1a8df5262920187e5772133684a272a46a4484b4f1dc950e678eb9009b73a569d88c4ee12a5692543aab6894ae65380d7737e661ad0617a7bc7e9cf0d3ea97a7eb53a4a16672dfe7b0a849cca2149d038f2907b1c88fed3c84ec8f2b313404d4cdc5e7c03e4b840d175efa3cbda2bcdb2053e656c18c1f266caf083425094edfceb1acdf745365daa6353a3d635814e1a3ff2e8615395b94e0d9ce72b904c0c85b7944173a5ed540e7ba4f533142dea18168bc1ab095ea066ff28b1d06fab3ee3e23b47cb402f1a5503a23c9a92acfac9dbfcb9f7e0e082b97384a4db7932d71b5393a75181f07cdf32d1f9dd0320e1b8400d28a3fdd97fe253624d80d1caad358f04a9dbe9614955832f49b0c80e9f9c3fcb1388edde9c68cf3516ea6f4f4505571dd8c816a1a7f1305729402ec0700d3f29c4df5e1d8661dec474dc1ba5085642ed2afc631a3701765fdadb55dad61c7eeca04c83564ffdead70ed9b840a1b5f80d4d7b1f8c502f979d5dfe48eb7a7ade826d47c38313eb1cab0bb6d52e2b84ac4a21e3983574b221bb903e262485987749e7b3f29ac5a63f55d05042d6e10547848c047c950aad836f55adefe3702fcc10d0caa9104decf71272dd02442f37010f89077cbc581d7b2f4d4a86ba601435b62dd29dd9c9026d074dce54db485de33ca93e78ec20aad44d4ab5aacc19d36d5c4e52b666db93f9529a5fc8ff62d13cb8213135c8a6816b161a88fce46b8fab203ec7a745e8e53c541ff3f15cbdd1110fb0577f354c3dac953d8a16fdf03e7518576b10c844d20d7064b3c79c8b5eeb1fa04304a3a03572d24163a6d4ce991642638b0e0a3af1a75aa96d80eccc7efbd14e324e0a3cc61e1e3f5800e38645fd435d6b447072c91b28a714389f89033ecd9513b1e9c6bda2a5f6f10955069f021264f24413b03b9cf0c9cfe7a1a23bd3c25f4ee0f016cf2adc20f29a120ed396c3a11402505e5975762269ee3c2f4c8e4913b582eae2c2db9add4c09d0f63475667ba2c86e23220dff729ddf74b74c2e03ad7208fb832d5510de834fa3f6874fcc9efdd3323a2e46bc78db02b652d167afcff43f0b755738ee85ae8db217785dfd642b8fd62fa6a91de78a343bc74ecaf3ec7ff6c19beb8778efb29feb2699cecb07903701efbfc15070b7bded1943d11c6ad85c8da776a4064d67d4a955cc6b13c39e1d8386f497bf53122d53095e9ebf1e4cec585fbd21f10b727b1f890b4a0e593c11ea730bfc3508afa746e8dd63d60c740ceb62a3204568d5d5a9acc82d03acf430384aa4821682119712ac488c2c0fc80c7c14279b76cb1ea9bdbd2128730fe3a52fee00a638b5d9333bc806e1e43ec1a0537ff6f7d3746a5468b60dcffb91d73895d6fe6de751b27b3554a27f974a14d73d2044de9e3d99c1640c2f9516b6a00dcda1c3822660205931a93e0cdcd01a92dddfbe9e9c6967be72e61fe1387979058df76c69aacc88f2bcea1888e604e0e8e7f4aad6f6686d44954ffd05f8c58958c0c408f3d547448de84909d577097f7d58abc30c0c051b84d6c1879f206f213f3721a1c83e661566377a91848d45f966c404f20bb2484ff699e3b57edc86c592d53d9c1241e4fdcf38f19a1bfa66d9715e271fa13ac01fad97845ef6ba421d3c50be6f1385f82f72610797e7cd46b198d06ebc76c37928e565acc28aefb81ed2476ebc8244e44c0a763cb9f276a65dede2f50d1fe691b6bcb981c54a3e4f8232131c9b1e9ee7ac09dd6cf4da650f43c0fe5378a464d85b0781d456b5e4898f278878bc35a76d243a64a0e0f1f5649691239dcba0a319fa3368043f01adf0d26af1375534c00558a3edbf7469f5edfb63e74fd30747f7d558e9f15f7f0388cd4e0b0a01a9489447e2fce17d01b36ace84dced1918d15897e8846f99d57374ddb1b887f27f85e708d2d6a729366f15af2cb58f59904eecf3c87eb0d88fe8b9d4cf966aae0ff23c7c8abee8aea86b5b7d872dc1c51401f384e8f5d1bf65228a9eda601ee96f12f17d0dc7da567a60929eaae4c7637560edcdd9c82d73abab6b64341fc4057bcad5a77befc44a81a93ca576320590ad8db6606c938186c84cb3b84761eef242289639fca597e49b56b35c6e94b73de08674bc55b6a599f787593f7b0aa2d58f2675706db3c96083c5ac950c3cb0143301c617e2f886c85300d90ac67f244304557c4d36fb6fe5233f6f9126eae72e28a92b59c05afb8f70facd25913ae5bdba58f9730aac8c70f6ca18600b6f50e9a0e6e156acee2b7793b753789b26a0704079f2b2c891c27c75a58e07bb9076258ee9eca57ab8f68961afe81a3c2321f8045cd7dfb0b29638be94c9a1bcc44040a477608111dabbeda66ef4b43e4b36b49b5c46816c32fea7366fa207f686232bf5752e7653ce4e7a76ea81d2d6cc858fa1dc7654045459b101f1a4d2283911cfb8c319cc415ea44327086ecf7ab4ce17d1928a85995d2e9c802e2524166e808f2c024743d180038e9fdd74efac2d03cbc3d9b6e71e5d4d8d663e39f110e9c61999084e5bd61a7654503be37edd7bf93259184dd08d1eb2793ffa5dc6ecbc8c442a960c3806b7c1b92473c1a1a5428506cd0f5535372d4fd6f47f3d8d24e5b2892193b301f5de034254805940e9832b85900e0b1cba4cce1c6df84ee49c38f240135a74261acdd0c3296678f8f8f2e5abe5934190923a2d5f7f4eab4c018cf7293ffc3130c9a112163c476217adc7c5ea8839bf427df357bca0113c79912c654e86f4f32e05dccbd41aaa4c53bf7d78a3b0dc7e004cfbf885e98b99ad87652515de8ed03ed2b42ce99abac5746893e821c2f43fa48a290c4dae8286f5fc3b7ae319c517737b6b1c94be0bcc00843458f0a21d80550bacd77dee317c1fd37390792cb0a68faf4bd0f938d2a36d10d4ef42e36eb0ca4a9a65f8fd8ce15ab1e20ba6bf0f78b9640fa47ac5f2b2a528daaecf6cc0cf09dd9e9c5d10d8cf30355c80668c42ccabebddc6475e4dbfb998c6bb41b0970321b5bf3f86070116667c99985f865625ed154115221d46031564c17cf7968fa7aa2289b2f40299f89ee2e0200e5411ed02eb8ec99e5a4c743d86e74ab182396f3cdc551209e055a86d86fdb065d16a8f6c31a86beb74f489d8a0319ca6c879a7bbbfc8594179a8b107e436a3078c9c81f8b943855935d1a6d5d1a95e2a72b66e80f169edeb7d635c8238a8d38d992276517e4616b3bca237c44132f015405f4684a5791252046112c387a8604d66d094d4245a264d67700453eb59033155a205aae409fdd1eadda4cca722a4a705fd3bf129efdd8c006c5c5b0e80fadd394a95121693ab24a8eb16c914a96adad1b404a089e02c3b3b84c87c5d3927433f4329eb08396a2d85973fcfa35ee0544afef2da3c2b138fc2eb7ff3e175ccf177d327b30bc7ba541d7a0df0d1f005a78da2c8ae62e342d767c43a9de068e6ee1daa46252f3a64bd1e98da982338716b44363b651be09866893a9592f1b2834173dc8749b9ffc5d8e4c3d925119271b0003c9fc188908b83a8f1a1aaf9cae1889bce2d1432e6a205a8e11ea861c8d29e26a4e63721047f2932df7b0949fe935cc65864f344d603b7c4f81cc8f1a681760a338e4c60714d2dfd50b4d241ff4b102ae4d0e0d01cdf10d9011e8bb9116fe2c025e1d75e10f2988cb0510c5f8f43669c45a2c51b353d8b0f87625896886413a250bd107d32286a2f75ec9bfe6c9a0cf852090f4c605e1b6db7a39befedb254f3e5d3d836d933a3ff290550a492a0c4c3fbc93d75a123111ca34531d5ec1c8c01f08c8cc2b0418046d02035ca7fbf71685caba64dfe4053af36f470fa60ce7330ea553202f681c20bde51725fde7a21034858f0245a679f67a0a0112c8911099899ca9c8bce22e21fe7d83de78e890740a8e6c24b3b858e1ca08f848a1ad8369a88d118a2fb85fc521d1ea48fab7a55d796e0c38c330e5f7edb4c0207fa6464c655c5959cafc278ab4ed1bcf98d4c49efb1ef4d15bab3c7d6af589909e407d8adabdd8923557515e27fd6f034173be1982ea6d3404cfc6ffce8338ab5321ddc891296210c32e9f92e464ca38b869ea473e9d4638a8f852ccb423973435eba00dd8c262d6973aec68c710b8ef5f31f08f6f890b7e134ab1e80a3f5ac72493aa6c1feedf22d532d247d78ff54b2cfca56d69602a3206ed5ea6c5d9a34de355a91256cfd3587793a7bd777b252a922a40eb65ad55e6b6c24075a4aadf4d14033c520f523941c37ea298be7938187f87a89ddbf4dd66445233f5d2dd7aa2eec3516a9085749a58d13ec52563e70ec7109f6e0e0ad005307b9a4942cb641dc0117bf8b12fbfba3249a979a136d3db48a3bd7414d9f7e956288a63b8474e24e6b3d4d868f7278dea03d5bb877595163ea6da2a7dabf1070c65b1ef6002738b907b561857f65c7d7c0752f4f77f27c88488ee335ed06daf70fe9aef14b0f3d490dfda8d7013635d4d7bc837d80157a738f6ee4e5ae6df649498388c7aafdc4a064d6df2ed8d0efc8d4cc37ced2b0543cb6afd6eb64c408286ade3cacdfd196dd16e36ca693a77fd648d8056058f898a0784252e3"}, @NFTA_DATA_VALUE={0x99, 0x1, "a7337b13a23f5b7697f389330c389e1024305f9b52877204f7c0e9339835404907cdd119696ea4847b7a6a4c0f86a6c56a107d62a229ed5d9d7355afa447e6e1c32347c638d1bbe43ae13612b0f7d5c9c482e69f152057231b08e3031f560ac402383a2599c7c694d3710cea2a4db844a88e14c15b70d8727ef56c51bdb4632f59fc48fbe46c3c20072b78f3620cf6c3ad3b15a4b7"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x40}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}]}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xef, 0x6, 0x1, 0x0, "6265c780cc26cb3938fa5a127d0d6c7e5b9032c7aab141d7847f830a708a361e8262b83bd699705b75ca9b94b7947e1d1cdc230e2fdb7055531c43112b772057413450eacbbbad9141507193bee24e6f70f8a1d566bef047a6ef1c864db5f74bc85081b03ab9e855753201e8d9794669c59a57daf15781b8fcf3e8a0f362e617967dba0877d92e85b2c4efa3d87918041361c21971a6567409e3dd7ccd402dec2ce3580a8c277d09cc1d0ff64fd4a857a7dd54652fd75439913dcbee739c83d1b0f39340137ee5ad153dc826ef5c7ddf24bf55589235cc6b1a2492578cb0cb09ccdff2245d143fcb663e5f"}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x3000}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) 00:50:25 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0x17, 0x0, 0x0) 00:50:25 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0x11, 0x0, 0x0) 00:50:25 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 00:50:25 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) signalfd(r0, &(0x7f00000000c0), 0x8) 00:50:25 executing program 2: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x800, 0x1000}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}) 00:50:25 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0x15, 0x0, 0x0) 00:50:25 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x2, [{r1}, {}]}) 00:50:25 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0x19, 0x0, 0x0) 00:50:26 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) bind$inet(r1, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x400f00, 0x4) 00:50:26 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8a83b52f"}}) 00:50:26 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x9501}], &(0x7f0000000040)='GPL\x00', 0x7, 0xb4, &(0x7f0000000100)=""/180, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:26 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x4, 0x0, 0x0) 00:50:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1d, 0x0, &(0x7f00000000c0)) 00:50:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x6c3, 0x0, &(0x7f0000000080)) 00:50:26 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1}}) 00:50:26 executing program 5: r0 = socket(0xa, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) 00:50:26 executing program 0: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}) 00:50:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x12, 0x0, 0x0) 00:50:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x42, 0x0, &(0x7f00000000c0)) 00:50:26 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1e, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:27 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x4048091) 00:50:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:50:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000001080)={'virt_wifi0\x00', {0x2, 0x0, @local}}) 00:50:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1600bd7f, 0x0, &(0x7f00000000c0)) 00:50:27 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x0) 00:50:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002700)=[{0x0, 0x803e}, {&(0x7f0000000140)='D', 0x1}, {&(0x7f0000000300)="f1", 0x1}], 0x3}, 0x0) 00:50:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvfrom$unix(r0, &(0x7f0000000080)=""/71, 0x47, 0x0, &(0x7f0000000100)=@abs, 0x6e) [ 228.414801][ T25] audit: type=1400 audit(1647910227.626:251): avc: denied { read } for pid=5673 comm="syz-executor.5" name="vfio" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vfio_device_t tclass=chr_file permissive=1 00:50:27 executing program 5: syz_clone(0x49242000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='^') 00:50:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1600bd7f, 0x0, &(0x7f00000000c0)) 00:50:27 executing program 3: r0 = socket(0xa, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 228.523899][ T25] audit: type=1400 audit(1647910227.646:252): avc: denied { open } for pid=5673 comm="syz-executor.5" path="/dev/vfio/vfio" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vfio_device_t tclass=chr_file permissive=1 00:50:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x14, 0x0, &(0x7f0000000080)) [ 228.636091][ T25] audit: type=1400 audit(1647910227.666:253): avc: denied { ioctl } for pid=5673 comm="syz-executor.5" path="/dev/vfio/vfio" dev="devtmpfs" ino=691 ioctlcmd=0x3b66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vfio_device_t tclass=chr_file permissive=1 00:50:28 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1600bd7f, 0x0, &(0x7f00000000c0)) 00:50:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000004940), 0x40000000000025e, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) 00:50:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x1e, 0x0, &(0x7f0000000080)) 00:50:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1600bd7f, 0x0, &(0x7f00000000c0)) 00:50:28 executing program 4: open$dir(&(0x7f00000000c0)='.\x00', 0x90082, 0x0) 00:50:28 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000e80)={0x28, 0x0, 0x0, @hyper}, 0x10) 00:50:28 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18401a00fdffff0000000000001867000007000000000000000700000018290000000000", @ANYRES32, @ANYBLOB="000000000600000018270000", @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000000001000000180000000000000000000000070000008520000001000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0xa4, &(0x7f0000000140)=""/164, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0xab) 00:50:28 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x3e9, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:28 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x6cb, 0x0, &(0x7f0000000080)) 00:50:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x20000104, 0x340, 0xffffffff, 0x210, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) [ 229.513948][ T25] audit: type=1400 audit(1647910228.716:254): avc: denied { connect } for pid=5709 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 00:50:28 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000400)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8c7568e6af024d2ce3017af36f833150c6922c227aa6d204bfb8558928582ebec097da81ff70d3f5500d034233b813ecd8ebe5cee6669f13709b9293bf32f514"}, 0x48, 0xfffffffffffffffc) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000240)='rxrpc\x00', 0x0, 0x0, 0x0, r0) 00:50:29 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x13, 0x0, &(0x7f0000000080)) 00:50:29 executing program 4: socket(0xa, 0x0, 0x300) 00:50:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000140)='D', 0x1}], 0x1}, 0x0) recvmmsg$unix(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:50:29 executing program 0: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000300)={'sit0\x00', 0x0}) 00:50:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x6c5, 0x0, &(0x7f0000000080)) 00:50:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x19, 0x0, &(0x7f00000000c0)) 00:50:29 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0xc, 0x0, &(0x7f0000000080)) 00:50:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x6bf, 0x0, &(0x7f0000000080)) 00:50:29 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140), 0x10) 00:50:29 executing program 4: r0 = socket(0xa, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 00:50:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x31, 0x0, &(0x7f00000000c0)) 00:50:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1a, 0x0, &(0x7f00000000c0)) 00:50:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c3d3aa5ef8198614c6f5a1140b52ad4921c0f33cedba8b77a0a9b957b7974923afee4c85e3c35ae9a4de14edb9835490daa3cbd5c74e91417b60a33744e2ce8e8884736d80cd460720d45285d0", 0x4d}], 0x1}, 0x0) recvmmsg$unix(r0, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/77, 0x4d}], 0x1}}], 0x1, 0x0, 0x0) 00:50:30 executing program 3: syz_emit_ethernet(0x7a, &(0x7f0000000740)={@broadcast, @random="308676221508", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2}}}}, 0x0) 00:50:30 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:30 executing program 0: r0 = socket(0xa, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40030022, 0x0) 00:50:30 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 00:50:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x4, 0x0, &(0x7f0000000080)) 00:50:30 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x22, 0x0, &(0x7f0000000080)) 00:50:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x9, 0x0, &(0x7f0000000080)) 00:50:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x36, 0x0, 0x0) 00:50:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x10, 0x0, &(0x7f0000000080)) 00:50:30 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x0, 0x0, 0x6}, {0x6, 0x0, 0x3, 0x7fff}]}) 00:50:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}}}}) 00:50:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) 00:50:30 executing program 2: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 231.499268][ T25] audit: type=1326 audit(1647910230.706:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5769 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a92803049 code=0x0 [ 231.529714][ T5776] binder: 5773:5776 ioctl c4089434 0 returned -22 00:50:31 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x5}, 0x14}}, 0x0) 00:50:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:50:31 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x0, 0x0, 0x6}, {0x6, 0x0, 0x3, 0x7fff}]}) 00:50:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x12, 0x0, &(0x7f00000000c0)) 00:50:31 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x4d1a, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x7, 0xb4, &(0x7f0000000100)=""/180, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 232.110262][ T25] audit: type=1326 audit(1647910231.316:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5779 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a92803049 code=0x0 00:50:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) 00:50:31 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x0, 0x0, 0x6}, {0x6, 0x0, 0x3, 0x7fff}]}) 00:50:31 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@isofs={0x14}, 0x0, 0x0) 00:50:31 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) 00:50:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x2, 0x0, &(0x7f00000000c0)) [ 232.272069][ T25] audit: type=1326 audit(1647910231.476:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5791 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a92803049 code=0x0 00:50:31 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x0, 0x0, 0x6}, {0x6, 0x0, 0x3, 0x7fff}]}) [ 232.451888][ T25] audit: type=1326 audit(1647910231.656:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5801 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a92803049 code=0x0 00:50:32 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3e, 0x0, &(0x7f00000000c0)) 00:50:32 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x58) 00:50:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000140)='D', 0x1}], 0x1}, 0x0) 00:50:32 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x19, 0x0, &(0x7f0000000080)) 00:50:32 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 00:50:32 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x6c4, 0x0, &(0x7f0000000080)) [ 233.055081][ T25] audit: type=1400 audit(1647910232.266:259): avc: denied { setopt } for pid=5805 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 00:50:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)={0x18, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) 00:50:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) 00:50:32 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x11122, 0x0, 0x0) 00:50:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, 0x0, &(0x7f0000000080)) 00:50:32 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x6cc, 0x0, &(0x7f0000000080)) [ 233.269308][ T25] audit: type=1400 audit(1647910232.476:260): avc: denied { getopt } for pid=5825 comm="syz-executor.0" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 00:50:33 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}) 00:50:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}}) 00:50:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3, 0x0, &(0x7f00000000c0)) 00:50:33 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="c97fa1493651", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7d5ca0", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "d2cf76", 0x0, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [@fragment]}}}}}}}, 0x0) 00:50:33 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000440), 0x8) 00:50:33 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="c97fa1493651", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7d5ca0", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "d2cf76", 0x0, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [@fragment]}}}}}}}, 0x0) 00:50:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x2, 0x0, &(0x7f0000000080)) 00:50:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000ac0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 00:50:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}) 00:50:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x7, 0x0, &(0x7f0000000080)) 00:50:33 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x0, 0x2}, {0x6, 0x0, 0x0, 0x7fff}]}) [ 234.228091][ T25] audit: type=1326 audit(1647910233.436:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42265ab049 code=0x0 00:50:34 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:34 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="c97fa1493651", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7d5ca0", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "d2cf76", 0x0, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [@fragment]}}}}}}}, 0x0) 00:50:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}) 00:50:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x5, 0x0, &(0x7f0000000080)) 00:50:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0x0, 0x0, 0x0) 00:50:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x210, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 00:50:34 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1}, {0x6}]}) 00:50:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x30, 0x0, &(0x7f00000000c0)) 00:50:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}) 00:50:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000001700)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000340)=""/159, 0x9f}], 0x2, &(0x7f0000000180)}}], 0x1, 0x12000, &(0x7f0000001780)={0x0, 0x3938700}) sendmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000140)='D', 0x1}], 0x1}, 0x0) 00:50:34 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="c97fa1493651", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7d5ca0", 0x38, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "d2cf76", 0x0, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [@fragment]}}}}}}}, 0x0) 00:50:34 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) [ 235.090382][ T25] audit: type=1326 audit(1647910234.296:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5869 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93aa353049 code=0x0 00:50:35 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, &(0x7f00000000c0)) 00:50:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002700)=[{0x0, 0x34000}, {&(0x7f0000000140)='D', 0x1}, {&(0x7f0000000300)="f1", 0x1}], 0x3}, 0x0) 00:50:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) 00:50:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x36, &(0x7f0000000000)="61aa", 0x2) 00:50:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x3, 0x0, &(0x7f0000000080)) 00:50:35 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0xb, 0x0, &(0x7f0000000080)) 00:50:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4e, 0x0, &(0x7f00000000c0)) 00:50:35 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) [ 235.860479][ T25] audit: type=1400 audit(1647910235.066:263): avc: denied { ioctl } for pid=5882 comm="syz-executor.2" path="/dev/sg0" dev="devtmpfs" ino=699 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 00:50:35 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x9, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, 0x0, &(0x7f0000000080)) 00:50:35 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x6b1, 0x0, &(0x7f0000000080)) 00:50:35 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400f00, 0x4) 00:50:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0)) 00:50:35 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', 0x0}) 00:50:35 executing program 4: socketpair(0xa, 0x3, 0x7, &(0x7f0000000100)) 00:50:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002340)={0x0, 0x989680}) sendmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) 00:50:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:50:35 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x6c1, 0x0, &(0x7f0000000080)) 00:50:35 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:50:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1}}], 0x1, 0x0, &(0x7f0000002340)={0x0, 0x989680}) sendmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000140)='D', 0x1}], 0x1}, 0x0) 00:50:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x46, 0x0, &(0x7f00000000c0)) 00:50:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 00:50:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x5, 0x0, &(0x7f00000000c0)) 00:50:36 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400f00, 0x4) 00:50:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3d, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, &(0x7f00000000c0)=0x20) 00:50:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000001700)=[{{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x12000, &(0x7f0000001780)={0x0, 0x3938700}) sendmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) 00:50:36 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x5, &(0x7f00000009c0)=@framed={{}, [@cb_func]}, &(0x7f0000000040)='GPL\x00', 0x7, 0xbf, &(0x7f0000000900)=""/191, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000001700)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000340)=""/159, 0x9f}], 0x2}}], 0x1, 0x12000, &(0x7f0000001780)={0x0, 0x3938700}) sendmsg$unix(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000140)='D', 0x1}], 0x1}, 0x0) 00:50:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, 0x0, &(0x7f00000000c0)) 00:50:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r0, &(0x7f0000004a80)={&(0x7f0000004600)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000004a40)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 00:50:36 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) dup2(r0, r1) 00:50:36 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 00:50:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x14}, 0x48) 00:50:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x18, 0x0, &(0x7f00000000c0)) 00:50:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) getpeername(r1, 0x0, &(0x7f0000000200)) 00:50:37 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400f00, 0x4) 00:50:37 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x8}], &(0x7f0000000040)='GPL\x00', 0x7, 0xb4, &(0x7f0000000100)=""/180, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 00:50:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 00:50:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x21, 0x0, &(0x7f0000000080)) 00:50:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x6, 0xd, 0x0, 0x0) 00:50:37 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = inotify_init() dup2(r0, r1) 00:50:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x1c, 0x0, &(0x7f0000000080)) 00:50:37 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x36, &(0x7f0000000000), 0xf0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000), 0x8) 00:50:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 00:50:37 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x4}, [@func]}, &(0x7f0000000040)='GPL\x00', 0x7, 0xb4, &(0x7f0000000100)=""/180, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:37 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x6}, {0x6}]}) [ 238.817076][ T25] audit: type=1326 audit(1647910238.026:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5989 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a92803049 code=0x0 00:50:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r0, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x400f00, 0x4) 00:50:38 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 00:50:38 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x4, &(0x7f00000002c0)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0xfa030000}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0xb4, &(0x7f0000000100)=""/180, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3c, 0x0, &(0x7f00000000c0)) 00:50:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 00:50:38 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x0, 0x0, 0x6}, {0x6}]}) [ 239.567205][ T25] audit: type=1326 audit(1647910238.776:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5996 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a92803049 code=0x0 00:50:38 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r0, 0x3b65) 00:50:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000000)="61aa3b486113f9c9c53a96500cd0b3a0b90e253f", 0x14) 00:50:38 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x15, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:38 executing program 3: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}], 0x20}, 0x0) 00:50:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x5, 0x0, 0x0) 00:50:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r0, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x400f00, 0x4) 00:50:38 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x0, 0x0, 0x6}, {0x6, 0x0, 0x3}]}) 00:50:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, 0x0, &(0x7f00000000c0)) 00:50:39 executing program 5: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:50:39 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x68f52791b879e44f, 0x0) 00:50:39 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB='\f)'], 0x38) [ 239.829185][ T25] audit: type=1326 audit(1647910239.026:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6015 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42265ab049 code=0x0 00:50:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r0, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x400f00, 0x4) 00:50:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x14}, 0xffed}}, 0x0) 00:50:39 executing program 0: r0 = socket(0xa, 0x2, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 00:50:39 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe80009058703"], 0x0) 00:50:39 executing program 4: io_setup(0x4, &(0x7f00000000c0)=0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 00:50:39 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r0, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x400f00, 0x4) 00:50:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x0, 0x0, 0x0, 0x48}, 0x48) 00:50:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xd3}}, 0x0) 00:50:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x25, 0x0, &(0x7f0000000080)) 00:50:39 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r0, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x400f00, 0x4) 00:50:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r0, &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004a40)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 00:50:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 00:50:39 executing program 0: syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x40442, 0x0) r0 = syz_io_uring_setup(0x2bd1, &(0x7f00000001c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xc3b, 0x0, 0x0, 0x0, 0x0) 00:50:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, &(0x7f0000000380)) 00:50:39 executing program 1: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r0, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x400f00, 0x4) [ 240.292197][ T25] audit: type=1400 audit(1647910239.496:267): avc: denied { write } for pid=6049 comm="syz-executor.4" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 240.317250][ T3680] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 240.572778][ T3680] usb 6-1: Using ep0 maxpacket: 32 [ 240.722986][ T3680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 240.742732][ T3680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 240.923102][ T3680] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 240.932183][ T3680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.940746][ T3680] usb 6-1: Product: syz [ 240.945127][ T3680] usb 6-1: Manufacturer: syz [ 240.949733][ T3680] usb 6-1: SerialNumber: syz [ 240.957945][ T3680] usb 6-1: config 0 descriptor?? [ 241.004498][ T3680] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 241.015179][ T3680] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 241.210977][ T3678] usb 6-1: USB disconnect, device number 4 [ 241.219656][ T3678] ldusb 6-1:0.0: LD USB Device #0 now disconnected 00:50:40 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:40 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:40 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044649a40200e010102c70000000109021b000100000000090400000139cd2c00090505"], 0x0) 00:50:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_getroute={0x24, 0x1a, 0x811, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) 00:50:40 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec1700001320000012000000102000000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:40 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe80009058703"], 0x0) 00:50:40 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000117000/0x1000)=nil) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 241.770408][ T6061] loop3: detected capacity change from 0 to 131360 00:50:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0x248, 0x248, 0xffffffff, 0x0, 0x368, 0x468, 0x468, 0xffffffff, 0x468, 0x468, 0x5, 0x0, {[{{@ipv6={@empty, @private0, [], [], 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x5}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "4df570e65555f9a59e77c2012322174c8e7f02d0ce5c6a0935355438b194"}}}, {{@ipv6={@dev, @private2, [], [], 'veth0_vlan\x00', 'wlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv4=@multicast2, @port, @gre_key}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv6=@empty, @gre_key}}}, {{@ipv6={@private1, @private0, [], [], 'macvtap0\x00', 'caif0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) [ 241.826238][ T6061] REISERFS (device loop3): found reiserfs format "3.5" with standard journal [ 241.849274][ T6061] REISERFS (device loop3): using ordered data mode [ 241.865740][ T6061] reiserfs: using flush barriers [ 241.898157][ T6061] REISERFS warning (device loop3): sh-458 journal_init_dev: cannot init journal device unknown-block(254,2): -6 [ 241.922991][ T6061] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device 00:50:41 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) [ 241.944370][ T6061] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 241.944725][ T6071] x_tables: duplicate underflow at hook 1 00:50:41 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 242.013092][ T3261] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 242.071555][ T6075] loop3: detected capacity change from 0 to 131360 [ 242.092942][ T3674] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 242.116523][ T6075] REISERFS (device loop3): found reiserfs format "3.5" with standard journal [ 242.153289][ T6075] REISERFS (device loop3): using ordered data mode [ 242.173812][ T6075] reiserfs: using flush barriers [ 242.196391][ T6075] REISERFS warning (device loop3): sh-458 journal_init_dev: cannot init journal device unknown-block(254,2): -6 [ 242.242935][ T6075] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device [ 242.282523][ T6075] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space 00:50:41 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) [ 242.373121][ T3674] usb 6-1: Using ep0 maxpacket: 32 [ 242.384995][ T3261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.397080][ T3261] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=c7.02 [ 242.407156][ T3261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.418337][ T3261] usb 3-1: config 0 descriptor?? [ 242.465229][ T3261] pegasus_notetaker: probe of 3-1:0.0 failed with error -12 [ 242.477422][ T6080] loop3: detected capacity change from 0 to 131360 [ 242.506202][ T6080] REISERFS (device loop3): found reiserfs format "3.5" with standard journal [ 242.523775][ T3674] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 242.543548][ T3674] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 00:50:41 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) [ 242.560216][ T6080] REISERFS (device loop3): using ordered data mode [ 242.607585][ T6080] reiserfs: using flush barriers [ 242.627502][ T6080] REISERFS warning (device loop3): sh-458 journal_init_dev: cannot init journal device unknown-block(254,2): -6 [ 242.667685][ T3261] usb 3-1: USB disconnect, device number 3 [ 242.698609][ T6080] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device [ 242.733216][ T6080] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 242.764137][ T3674] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 242.781189][ T3674] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.805577][ T3674] usb 6-1: Product: syz [ 242.814373][ T3674] usb 6-1: Manufacturer: syz [ 242.822415][ T3674] usb 6-1: SerialNumber: syz [ 242.857866][ T3674] usb 6-1: config 0 descriptor?? 00:50:42 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:42 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 242.904571][ T3674] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 242.956384][ T3674] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 242.999173][ T6088] loop3: detected capacity change from 0 to 131360 [ 243.049394][ T6088] REISERFS (device loop3): found reiserfs format "3.5" with standard journal [ 243.062355][ T6088] REISERFS (device loop3): using ordered data mode [ 243.073243][ T6088] reiserfs: using flush barriers [ 243.081250][ T6088] REISERFS warning (device loop3): sh-458 journal_init_dev: cannot init journal device unknown-block(254,2): -6 [ 243.095315][ T6088] REISERFS warning (device loop3): sh-462 journal_init: unable to initialize journal device [ 243.114652][ T6088] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 243.151847][ T3261] usb 6-1: USB disconnect, device number 5 [ 243.165377][ T3261] ldusb 6-1:0.0: LD USB Device #0 now disconnected 00:50:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_newroute={0x20, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 00:50:42 executing program 3: syz_mount_image$reiserfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:42 executing program 0: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f00000000c0)="2400000042007702a00000000000000000f88809d5d26dbc6d0000000000008000000000", 0x24) recvmmsg$unix(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f00000006c0)=""/104, 0x68}, {&(0x7f0000000740)=""/217, 0xd9}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/215, 0xd7}], 0x7}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 243.268562][ T6094] loop3: detected capacity change from 0 to 131360 00:50:42 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe80009058703"], 0x0) 00:50:42 executing program 3: syz_mount_image$reiserfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:42 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x401c5820, &(0x7f0000000080)) 00:50:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x6, 0x1b4e, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1a, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 00:50:42 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000e00), r0) 00:50:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 243.710272][ T6104] loop3: detected capacity change from 0 to 131360 00:50:43 executing program 3: syz_mount_image$reiserfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:43 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:43 executing program 2: socketpair(0x1d, 0x0, 0xfa56, &(0x7f0000000000)) 00:50:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x514}, 0x0) 00:50:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x2000004c, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) [ 243.973559][ T6115] loop3: detected capacity change from 0 to 131360 [ 244.022987][ T3679] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 244.262946][ T3679] usb 6-1: Using ep0 maxpacket: 32 [ 244.383174][ T3679] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 244.394179][ T3679] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 244.563034][ T3679] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 244.572217][ T3679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.581327][ T3679] usb 6-1: Product: syz [ 244.585854][ T3679] usb 6-1: Manufacturer: syz [ 244.590588][ T3679] usb 6-1: SerialNumber: syz [ 244.607261][ T3679] usb 6-1: config 0 descriptor?? [ 244.644449][ T3679] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 244.655285][ T3679] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 244.865150][ T3675] usb 6-1: USB disconnect, device number 6 [ 244.872282][ T3675] ldusb 6-1:0.0: LD USB Device #0 now disconnected 00:50:44 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100009ad4b620110f2110f7800102030109021b0001000000000904000001c6cbe80009058703"], 0x0) 00:50:44 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:44 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x6, 0x1d, &(0x7f0000000000)="38eb2710", 0x4) 00:50:44 executing program 2: pipe(&(0x7f0000002200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 00:50:44 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:44 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:44 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x32, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) [ 245.412205][ T25] audit: type=1400 audit(1647910244.616:268): avc: denied { create } for pid=6124 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.437680][ T6131] loop3: detected capacity change from 0 to 131360 00:50:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FTM_RESPONDER={0xea4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xe9d, 0x3, "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"}]}]}, 0xec4}}, 0x0) 00:50:44 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) [ 245.496312][ T25] audit: type=1400 audit(1647910244.616:269): avc: denied { setopt } for pid=6124 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 00:50:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x1, &(0x7f0000000840)=@raw=[@call], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:44 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x33, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:50:44 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x20000045, 0x0, 0x0) [ 245.635113][ T6140] loop3: detected capacity change from 0 to 131360 [ 245.769626][ T3675] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 246.012901][ T3675] usb 6-1: Using ep0 maxpacket: 32 [ 246.132985][ T3675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 246.144267][ T3675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 246.312944][ T3675] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=80.f7 [ 246.322058][ T3675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.330210][ T3675] usb 6-1: Product: syz [ 246.334526][ T3675] usb 6-1: Manufacturer: syz [ 246.339167][ T3675] usb 6-1: SerialNumber: syz [ 246.351868][ T3675] usb 6-1: config 0 descriptor?? [ 246.365315][ T25] audit: type=1400 audit(1647910245.576:270): avc: denied { rename } for pid=2948 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.388390][ T25] audit: type=1400 audit(1647910245.576:271): avc: denied { unlink } for pid=2948 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.405082][ T3675] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 246.418608][ T25] audit: type=1400 audit(1647910245.576:272): avc: denied { create } for pid=2948 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.425434][ T3675] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 246.625000][ T3679] usb 6-1: USB disconnect, device number 7 [ 246.632223][ T3679] ldusb 6-1:0.0: LD USB Device #0 now disconnected 00:50:46 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8934, &(0x7f0000000080)) 00:50:46 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:46 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x80108906, 0x0) 00:50:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x7, 0x0, 0x0, 0x1b4e, 0x0, 0x1}, 0x48) 00:50:46 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:46 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 00:50:46 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000001500)={0x2, 0x9, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private0}, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x90}}, 0x0) [ 247.185774][ T6156] loop3: detected capacity change from 0 to 131360 00:50:46 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608388af7d2e7d01, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:46 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 247.284600][ T3731] I/O error, dev loop3, sector 131200 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 00:50:46 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011100)) 00:50:46 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) 00:50:46 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x0, 0x0, 0x1b4e, 0x0, 0x1}, 0x48) 00:50:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0) 00:50:46 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011100)) 00:50:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x2}, 0x0) 00:50:47 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011100)) 00:50:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000180001000000000000000000020000000046725b"], 0x1c}}, 0x0) 00:50:47 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:47 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1, &(0x7f00000004c0)=@raw=[@ldst={0x0, 0x0, 0x2}], &(0x7f0000000540)='GPL\x00', 0x4, 0x9d, &(0x7f0000000580)=""/157, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:47 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x440, 0x330, 0x3d0, 0x0, 0x330, 0xe8, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, &(0x7f0000000000), {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x0, 0x0, 0x8}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x5, @multicast2}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x4}, 0x3}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0x0, 0xff, 'hsr0\x00', 'ip6tnl0\x00', {}, {}, 0x5c, 0x2, 0x76}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x10, 0x240, 0x13}}, @common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @rand_addr, 0x4e20}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @rand_addr=0x64010102, 0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x40040) socket(0x3, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x88c4) pipe(&(0x7f0000000a40)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x1, &(0x7f0000000840)=@raw=[@call={0x85, 0x0, 0x0, 0xa7}], &(0x7f0000000880)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}}, 0x40010) 00:50:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MTU={0x6}]}, 0x33fe0}}, 0x0) 00:50:47 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) 00:50:47 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}], 0x0, &(0x7f0000011100)) 00:50:47 executing program 2: clock_gettime(0x0, &(0x7f0000000340)={0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={r0}, 0x0) [ 248.141982][ T25] audit: type=1400 audit(1647910247.346:273): avc: denied { read append } for pid=6195 comm="syz-executor.0" name="ppp" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 00:50:47 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, 0x0, 0x0) [ 248.196320][ T6201] loop3: detected capacity change from 0 to 256 [ 248.234009][ T6201] REISERFS (device loop3): found reiserfs format "3.5" with standard journal 00:50:47 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x4020940d, &(0x7f0000000000)={'vxcan1\x00'}) [ 248.248999][ T25] audit: type=1400 audit(1647910247.376:274): avc: denied { open } for pid=6195 comm="syz-executor.0" path="/dev/ppp" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 248.270912][ T6201] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device 00:50:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) 00:50:47 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x200, 0x0) [ 248.307830][ T6201] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 248.344458][ T6201] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to 00:50:48 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:48 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:48 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f8, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xa8}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 00:50:48 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="39b917246b24972b19d172112b3fd0f9de1d469a4c", 0x15}}, 0x0) 00:50:48 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}], 0x0, &(0x7f0000011100)) 00:50:48 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8942, &(0x7f0000000080)) 00:50:48 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f00000003c0)="a2", 0x1) [ 248.975658][ T25] audit: type=1400 audit(1647910248.186:275): avc: denied { write } for pid=6215 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 248.977566][ T6219] loop3: detected capacity change from 0 to 256 [ 248.999643][ T6217] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.060831][ T6219] REISERFS (device loop3): found reiserfs format "3.5" with standard journal [ 249.072310][ T6219] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device 00:50:48 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8941, &(0x7f0000000000)={'vxcan1\x00'}) [ 249.103864][ T6219] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition 00:50:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x48) [ 249.142558][ T25] audit: type=1400 audit(1647910248.346:276): avc: denied { create } for pid=6227 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 249.167009][ T6219] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to 00:50:48 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_buf(r0, 0x6, 0x3, &(0x7f0000000000)="38eb2710", 0x54) 00:50:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086602, &(0x7f0000000100)={'dummy0\x00'}) [ 249.211297][ T25] audit: type=1400 audit(1647910248.396:277): avc: denied { setopt } for pid=6227 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 00:50:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010a}) 00:50:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x3, 0x0, 0x0) 00:50:49 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:49 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r0, &(0x7f0000000100)="e2e380", 0x3, 0x0, 0x0, 0x0) 00:50:49 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}], 0x0, &(0x7f0000011100)) 00:50:49 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f000000adc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f000000aec0)={0x0, 0x0, &(0x7f000000ae80)={&(0x7f000000ae40)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 00:50:49 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000001440)={@null, 0x0, 'hsr0\x00'}) [ 249.898812][ T6247] loop3: detected capacity change from 0 to 256 [ 249.934330][ T6248] ieee802154 phy0 wpan0: encryption failed: -22 00:50:49 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x82, 0x0, 0x0) 00:50:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@empty, @private2, @ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80240105}) [ 249.966733][ T6247] REISERFS (device loop3): found reiserfs format "3.5" with standard journal [ 249.983064][ T6247] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device 00:50:49 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x2a, 0x0, 0x0) 00:50:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5421, &(0x7f0000000100)={'dummy0\x00'}) [ 250.013486][ T6247] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 250.027010][ T6247] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to 00:50:49 executing program 0: r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="a6", 0x1) 00:50:49 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a1, &(0x7f0000000000)={'vxcan1\x00'}) 00:50:50 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:50 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0}], 0x0, &(0x7f0000011100)) 00:50:50 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 00:50:50 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 00:50:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0), 0xa9) 00:50:50 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:50 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000340), 0x4) 00:50:50 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) [ 250.852245][ T6274] loop3: detected capacity change from 0 to 256 00:50:50 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x18, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) [ 250.901290][ T6274] REISERFS (device loop3): found reiserfs format "3.5" with standard journal [ 250.922889][ T6274] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device 00:50:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) [ 250.944593][ T6274] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 250.958243][ T6274] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to 00:50:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) 00:50:50 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0}], 0x0, &(0x7f0000011100)) [ 251.097805][ T6290] loop3: detected capacity change from 0 to 256 [ 251.122184][ T6290] REISERFS (device loop3): found reiserfs format "3.5" with standard journal [ 251.140387][ T6290] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device [ 251.155994][ T6290] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 251.169844][ T6290] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to 00:50:50 executing program 0: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)) socketpair(0xf, 0x0, 0x0, &(0x7f0000000600)) 00:50:50 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r2}, 0x18) 00:50:50 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0}], 0x0, &(0x7f0000011100)) 00:50:50 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:50 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r1, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x400f00, 0x4) 00:50:50 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x2, &(0x7f00000004c0)=@raw=[@exit, @func], &(0x7f0000000540)='GPL\x00', 0x4, 0x9d, &(0x7f0000000580)=""/157, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:50:51 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8937, &(0x7f0000000000)={'vxcan1\x00'}) 00:50:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x44}}, 0x0) [ 251.757429][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 251.757444][ T25] audit: type=1400 audit(1647910250.966:281): avc: denied { bind } for pid=6296 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 251.770293][ T6301] loop3: detected capacity change from 0 to 256 00:50:51 executing program 0: socketpair(0x26, 0x5, 0x8, &(0x7f00000000c0)) 00:50:51 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3e, 0x0, 0x0) [ 251.874752][ T6301] REISERFS (device loop3): found reiserfs format "3.5" with standard journal 00:50:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0xffff, 0x0, "c183948bba354d73353ab8d963f82d72e06ba26cad863d54356ab138bcfb0d7866ece842147a4a5755c573cd3246b1ac82bf9ab2f07bf937c073c0e868f6f90588cfad65177976d5decf61bc3c5cfb47"}, 0xd8) 00:50:51 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f00000003c0)="a22b9e7e5a770e9011a6be0021d79fc21b55abc488470420e8622dba6d03fe12c01f12a94fa78b2492", 0x29) 00:50:51 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="6ae380799caccd64f40eb9b405891fb38bba966c92", 0x15, 0x0, 0x0, 0x0) [ 251.948496][ T6301] REISERFS warning (device loop3): reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device 00:50:51 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8923, &(0x7f0000000080)) [ 251.993814][ T6301] REISERFS warning (device loop3): reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition [ 252.007899][ T6301] REISERFS warning (device loop3): reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to [ 252.021985][ T6317] ieee802154 phy0 wpan0: encryption failed: -22 00:50:51 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) [ 252.158970][ T6323] loop3: detected capacity change from 0 to 131360 [ 252.191858][ T6323] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:51 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:51 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r1, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x400f00, 0x4) 00:50:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 00:50:51 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 00:50:51 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r0, 0x40086602, &(0x7f0000000100)={'ip6erspan0\x00'}) 00:50:51 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x48) [ 252.704728][ T6332] loop3: detected capacity change from 0 to 131360 [ 252.715312][ T25] audit: type=1400 audit(1647910251.926:282): avc: denied { setattr } for pid=6328 comm="syz-executor.0" path="pipe:[40587]" dev="pipefs" ino=40587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 00:50:52 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8982, &(0x7f0000000000)={'vxcan1\x00'}) 00:50:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x2, &(0x7f0000000100)=@raw=[@cb_func], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 252.796144][ T6332] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000040, 0x0, 0x0, 0x20000070, 0x200000a0], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {}]}, 0x138) [ 252.837042][ T25] audit: type=1400 audit(1647910251.926:283): avc: denied { getopt } for pid=6329 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 00:50:52 executing program 0: socketpair(0x23, 0x0, 0x80000001, &(0x7f0000000000)) 00:50:52 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r0, 0x0, 0x0) 00:50:52 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:52 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r1, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x400f00, 0x4) 00:50:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000700)={'veth1_to_team\x00', @ifru_flags}) 00:50:52 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:52 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) socketpair(0x2a, 0xa, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) accept4$phonet_pipe(r1, &(0x7f0000000280), 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000680)=@rose={'rose', 0x0}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 00:50:52 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x0, 0xd0}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:50:52 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x43, 0x0, 0x0) [ 253.681946][ T6356] loop3: detected capacity change from 0 to 131360 [ 253.698922][ T6359] veth1_to_team: mtu less than device minimum [ 253.721578][ T6356] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x0, &(0x7f00000000c0)={@multicast2, @multicast1, @local}, 0x10) 00:50:53 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 00:50:53 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:53 executing program 0: r0 = epoll_create(0x6) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 00:50:53 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8, &(0x7f0000000000)="38eb2710", 0x4) [ 253.933929][ T6370] loop3: detected capacity change from 0 to 131360 [ 253.961941][ T25] audit: type=1400 audit(1647910253.166:284): avc: denied { node_bind } for pid=6371 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 253.995364][ T6370] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:53 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:53 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:53 executing program 0: socket(0x22, 0x0, 0xfff) 00:50:53 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x8901, &(0x7f0000001440)={@null, 0x0, 'hsr0\x00'}) 00:50:53 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x23, 0x0, 0x0) 00:50:53 executing program 0: pipe(0x0) socket$netlink(0x10, 0x3, 0x1) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 00:50:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) [ 254.595810][ T6383] loop3: detected capacity change from 0 to 131360 [ 254.606453][ T25] audit: type=1400 audit(1647910253.816:285): avc: denied { create } for pid=6380 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 00:50:53 executing program 2: r0 = socket(0x2, 0x3, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 00:50:53 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0xa, 0x0, @empty}, 0x10) [ 254.695854][ T6383] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x60}, 0x0) 00:50:54 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) [ 254.926620][ T6405] loop3: detected capacity change from 0 to 131360 [ 254.963867][ T6405] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:54 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 255.324473][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.330799][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 00:50:54 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x6}, 0x48) 00:50:54 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000001c0)) 00:50:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001900)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x45, 0xfc, "10c565f0885e16e88b9cc2f99107dad6330e0a5886106804f432b52c8b0760f16fc9be1b320bea87839980d9919f82f87738de0c70a44ca55663babf8952b38164"}]]}, 0x5c}}, 0x0) 00:50:54 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040), 0x0, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000002c0)={'ah\x00'}, &(0x7f0000000300)=0x1e) 00:50:54 executing program 0: pselect6(0x40, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000300)={0x9}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x3]}, 0x8}) [ 255.653882][ T6415] loop3: detected capacity change from 0 to 131360 00:50:54 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 255.703902][ T6415] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:55 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x35, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:50:55 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), 0xffffffffffffffff) [ 255.791681][ T25] audit: type=1400 audit(1647910254.996:286): avc: denied { getopt } for pid=6420 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 00:50:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @broadcast}}}) 00:50:55 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r1, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:55 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:55 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040), 0x0, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x13, 0x0, 0x0) 00:50:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}) 00:50:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:50:55 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x6, 0x8, &(0x7f0000000040)="7d8d65d9", 0x4) 00:50:55 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000180)="042b", 0x20000182, 0x20000045, 0x0, 0x0) 00:50:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0xfffffffffffffffe, 0x9999999999999999}}, 0x0) [ 256.607024][ T6442] loop3: detected capacity change from 0 to 131360 00:50:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000b"], 0x28}}, 0x0) [ 256.665634][ T6442] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:55 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8942, &(0x7f0000000000)={'vxcan1\x00'}) 00:50:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x48) 00:50:56 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r1, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:56 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:56 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040), 0x0, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0) 00:50:56 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto(r0, 0x0, 0x0, 0x40090, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1}, 0x80) 00:50:56 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x13, 0x0, 0x0) 00:50:56 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x5, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:50:56 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2}, 0x20) 00:50:56 executing program 2: socket(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) [ 257.523168][ T6466] loop3: detected capacity change from 0 to 131360 [ 257.618052][ T6466] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:56 executing program 0: socketpair(0x1e, 0x0, 0x75911d3b, &(0x7f0000000000)) 00:50:56 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611c", 0x1e, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:56 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x20000898, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) [ 257.790589][ T6481] loop3: detected capacity change from 0 to 131360 [ 257.828212][ T6481] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:57 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r1, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:50:57 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:57 executing program 5: r0 = gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, r1, 0x0, 0x0, 0x0}, 0x30) 00:50:57 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80) 00:50:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x500}, 0x0) 00:50:57 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611c", 0x1e, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:57 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x6, 0xd, &(0x7f0000000000)="e73d00", 0x3) [ 258.441360][ T6492] loop3: detected capacity change from 0 to 131360 00:50:57 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8911, &(0x7f0000000000)={'vxcan1\x00'}) 00:50:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x300}, 0x0) [ 258.561326][ T6492] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:57 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, 0x0, 0x0) 00:50:57 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) accept4$phonet_pipe(r1, &(0x7f0000000280), 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000680)=@rose={'rose', 0x0}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41089040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}}, 0x4000) 00:50:57 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611c", 0x1e, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:58 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(0xffffffffffffffff, 0x90e, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 258.806974][ T6511] loop3: detected capacity change from 0 to 131360 [ 258.887811][ T6511] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:58 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(0xffffffffffffffff, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:58 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x6, 0x8, &(0x7f0000000000)='x\x00\x00\x00', 0x4) 00:50:58 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:50:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x800, 0x6, 0x7, 0x0, 0x1}, 0x48) 00:50:58 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e0000000000000000", 0x2d, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', 0x0}) 00:50:58 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000100), 0x4) [ 259.374803][ T6521] loop3: detected capacity change from 0 to 131360 00:50:58 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r0, &(0x7f0000000100)='!', 0x1, 0x4, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x0, 0x1, {0xa, 0x4e24, 0x8000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x8}}}, 0x80) [ 259.448999][ T6521] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x8, 0x0, 0x0) [ 259.486833][ T25] audit: type=1400 audit(1647910258.686:287): avc: denied { setopt } for pid=6528 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 00:50:58 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e0000000000000000", 0x2d, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:58 executing program 5: bpf$MAP_CREATE(0xd, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 259.540647][ T6533] ieee802154 phy0 wpan0: encryption failed: -22 00:50:58 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(0xffffffffffffffff, 0x90e, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 259.663645][ T6537] loop3: detected capacity change from 0 to 131360 [ 259.724791][ T6537] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:59 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:50:59 executing program 0: bpf$MAP_CREATE(0x11, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:50:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x0, 0x18, 0x1}, 0x48) 00:50:59 executing program 5: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "a9b7fc", 0x1}) 00:50:59 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e0000000000000000", 0x2d, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x24}}, 0x0) 00:50:59 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x6, 0x1b4e, 0x0, 0x1}, 0x48) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) [ 260.251609][ T25] audit: type=1400 audit(1647910259.456:288): avc: denied { ioctl } for pid=6545 comm="syz-executor.5" path="socket:[40955]" dev="sockfs" ino=40955 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.278414][ T6548] loop3: detected capacity change from 0 to 131360 00:50:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x10, 0x5, @empty}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) [ 260.310489][ T6548] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:50:59 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec030200010052", 0x35, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:50:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x0, &(0x7f00000000c0)={@multicast2, @multicast1, @local}, 0xc) [ 260.429633][ T6560] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:50:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FTM_RESPONDER={0xea4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xe9e, 0x3, "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"}]}]}, 0xec4}}, 0x0) [ 260.525896][ T6564] loop3: detected capacity change from 0 to 131360 00:50:59 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(0xffffffffffffffff, 0x90e, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 260.593266][ T6564] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:51:00 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:51:00 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @loopback}, {}, 0x164, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)='team0\x00'}) 00:51:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0xb, 0x0, 0x0) 00:51:00 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec030200010052", 0x35, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:51:00 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, 0x0) 00:51:00 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:00 executing program 2: socket(0x2, 0x803, 0x0) [ 261.198513][ T6574] loop3: detected capacity change from 0 to 131360 00:51:00 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000100), 0xc) [ 261.282332][ T6574] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:51:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x24}}, 0x0) 00:51:00 executing program 5: pipe(&(0x7f0000001b00)) 00:51:00 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec030200010052", 0x35, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:51:00 executing program 4: r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 261.586496][ T6595] loop3: detected capacity change from 0 to 131360 [ 261.611572][ T6595] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 261.682508][ T4950] I/O error, dev loop3, sector 131200 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 00:51:01 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:51:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 00:51:01 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x894c, 0x0) 00:51:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIOCLEX(r0, 0x5451) 00:51:01 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345", 0x39, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:51:01 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:51:01 executing program 0: bind$bt_sco(0xffffffffffffffff, &(0x7f0000000380)={0x1f, @fixed}, 0x8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000680)=@rose={'rose', 0x0}, 0x10) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 00:51:01 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x891e, &(0x7f0000000000)={'vxcan1\x00'}) 00:51:01 executing program 5: bpf$MAP_CREATE(0x16, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 262.146172][ T6608] loop3: detected capacity change from 0 to 131360 [ 262.170121][ T6608] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:51:01 executing program 5: r0 = socket(0x11, 0xa, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={0x0}}, 0x0) 00:51:01 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345", 0x39, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) [ 262.368076][ T3680] Bluetooth: hci0: command 0x0401 tx timeout 00:51:01 executing program 4: r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 262.442374][ T6624] loop3: detected capacity change from 0 to 131360 [ 262.510225][ T6624] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:51:02 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:51:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000) 00:51:02 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x800, 0x6, 0x1b4e, 0x0, 0x1}, 0x48) 00:51:02 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:51:02 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345", 0x39, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:51:02 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000001800)={0x0, @empty, 0x0, 0x0, 'lblc\x00'}, 0x2c) [ 263.013358][ T6654] loop3: detected capacity change from 0 to 131360 00:51:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@func]}, &(0x7f0000000100)='GPL\x00', 0x2, 0xe3, &(0x7f0000000140)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 263.126954][ T6654] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 263.233779][ T6664] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 00:51:02 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8901, &(0x7f0000000000)={'vxcan1\x00'}) 00:51:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x10}]}, 0x24}}, 0x0) 00:51:02 executing program 4: r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:02 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec030200010052654973457246", 0x3b, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) [ 263.393844][ T25] audit: type=1400 audit(1647910262.606:289): avc: denied { getattr } for pid=6665 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1440 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 00:51:02 executing program 2: socket(0x2, 0x803, 0x5) [ 263.461242][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 263.529449][ T6675] loop3: detected capacity change from 0 to 131360 [ 263.626866][ T6675] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 263.629124][ T25] audit: type=1400 audit(1647910262.836:290): avc: denied { read } for pid=6673 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1440 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 263.728388][ T25] audit: type=1400 audit(1647910262.836:291): avc: denied { open } for pid=6673 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1440 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 00:51:03 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:51:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfeb2}}, 0x0) 00:51:03 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8930, &(0x7f0000000000)={'vxcan1\x00'}) 00:51:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 00:51:03 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec030200010052654973457246", 0x3b, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:51:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000003580)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_NAN_FUNC={0x268, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x25c, 0xe, 0x0, 0x1, [{0x61, 0x0, "6673092d74b695abf597435c7fdde31e35ee5ba590c2783d7115774d2279fc85ff5fdb417852c42d3223c6b2052922eb02849220b6cba655aa83db988e72619b6c07453a6ea275cb0b441ab17b1d37cde47022ffcfeb56b0aee454e270"}, {0x99, 0x0, "ce04b8a027eedaf2979c1cea093ac0239c1647fa81d836beda878f56264897655347c0402288352a5fe0585dc813f34165f59589d1cd7c3fdfce38de9093507fc9969aecb3cc7b5fb7799664df3b573e4e5cddd3c341d5e6ad845ebeb4db69f8442f214d5ffb23eb4ec71e7230277657dd67e0dbc9a90d4f958348980d45cf85fc9732dde8ae8d1ff470c7b509ab939ce40fedc347"}, {0x45, 0x0, "4ad81b56d426efa26331fd349692b7fbf69061e19194b7bff46b1775e874c628b2d51ecba78c1f7417214074b4ad2aade412a8f4e4469afee16d0b2feb1e74d538"}, {0xad, 0x0, "07afa842996873d2fea2b59b86b420039d8c5b4a49e662c367b95531bd7da9ddf2fabd86ea0d6ebd6b5b7f1a2cfd35f7e848bc7d4917ff17ec3443b80c9908301c24206c4d6acba5a0c7a393dfe42ae049307f2984b8f73d8e726d28fd4a8b4f46f3774584cdff591fb0e64645016b209db15f940e536d372efb54f14e0a55ed4cdb453ab7e8fa10f1c054d6a0b99fb09d81add3a9126e089580d21bd8b46ea631b5e2b4fcb9e84a13"}, {0x5d, 0x0, "79aef74816204086b04ec10f5b6958ed505b9dbe5fce499ea74a507a5fe0c69f80e0f6fc7f6992aa63a0c8a119877972c8aaf11edb40d7588af66d86b679b2d174206d5a93fa23e99346f360981cf979ebb5b5b012e4d1bd72"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x1c28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x3d4, 0xe, 0x0, 0x1, [{0xad, 0x0, "fbeebe543f1d36826f0cce98add4d1df593059bd9a4ee5a0351a83a90deb0f5f62448b0bb5b392cee9d6d2eadb354608abf06efbfbac9c60519c685f8d41587faef86fa42964f4e7bb02c2775147b44afea1930e77a4f7302b3e7672ee1ef0089604d7c5839920c1463f20588825a71d60f9c239d2ac0db4026f371b89c138116e3e3f74aef5c283349778de632670ae8c26ae14d7d96671df7a007cdeee9c1dec2f2c99c33608211c"}, {0xa1, 0x0, "8f809bad40c1c36b2fbd1bf199ba21ba7e3082f450237f183f7466744e1d270ff304b99361615f9414de224803ce7d302a034e5c632c8ff6262c76552ea9d9c9c55830d806c547d4e20483f5c6773c0da901e8f09e235d70f4adf490cf263dd8f1a4c96f06e095b3d1e4ad1df1e141a2b818795811c7c8ca3904140a52c3365e6fe0380e4c3bb4f84dfb41bbd475a076bbfa29ae8efa5646f583c31503"}, {0xed, 0x0, "6a62b04e0256786e1df66b74b280f589dccaf4ee0e2f422baab5a62b8a10c621fbe6efe78a8decdfe7fc1b058c484143f3b9fc30c5ab40fda989b1be829cbd8533ebf37990838eb629c4a96c711aacc360736be7b9de17a8fbd0d03da673da7c07dffdedf11b2d0f437ade41481f4c4bc16f9715412c23871a8d3c93329e282606053415f95cb188f5c43f012dff00efda0f57dd2afe62ceb31d3e3f866ca64ab4872cb485fbc0f4d6f429442439f77886a63ed1626d16a0291805aec288616367cd4e8ecfeecbe8591daa5ea71d7b417b00030e65dfd10684273402513472d1fc7c7e7a4be8e5c8c5"}, {0xcd, 0x0, "58ec8725c547cb2897008d0da7eda4e1f589068f735da01334106ccd69fac5e7e02a889832be0e25111bf1c84bcde2d9b3242ab0942329b3ec3995c5068dcf9cd2d7af79bed06160d7ba1c4224b07db63c3e9f565d8262139f8bebe1316d7b0c62ae98e0db34924505087178f46a13aeba3a056a9c13f85489961ac1d8d4ab4a9fffa0ffbf34303b85976822fca241e2851e6e7d4b18b0643e10dbc54d0171de9dd4fbc7b84a90d58fec1b34ee8d53ad14c6b375c8bca5fedeada2b95c2cb6983f0dea904dd1a37ee6"}, {0xb9, 0x0, "3cf2d5fcec5307d1c1e4963631b7d985e37f0dc3f5443ce90f6910ae183b7edca00f15e130ade2a084b4523850ae989e60f2a3abf1a1168fa18e79c1d07e8b929fc16a29483d92a0d40e360e90de430453f9fb3c68ed6f3971e85e713269cbc876de5a7de0db000753beaae0c426f3a07cef64b4a92e7b77229705a63e9b1bd786d0fc75008c35d67731d83c4d5f0cb1928495d920986535554aeab859f96577c45ee6e232ad0062fb73e52a745f9d8a852ff379cc"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1850, 0xd, 0x0, 0x1, [{0x1001, 0x0, "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"}, {0x25, 0x0, "c1114c45da28d328224374d6526d3e23272d2f418e765e95e85081acaab82d0bd3"}, {0x21, 0x0, "1852b14b09c6717b3a4a53613c2d8fd64d6a3cab8dd98c34e207110775"}, {0x101, 0x0, "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"}, {0x89, 0x0, "a0a0544fdbdb49aec03e631bdfda1404ca45c2a4c56bc66c4bfce022c77f162500f396f953eaba9c456d3c719ef2da401d2b7fe22088a26f557c7955068859a7cdac9d329bef9e85e534ea239dd64d563031b0b3427354ad8843f2aeeb5bd479b5e449c8e2ee8070d0ff899a8290696bb1f761d139b366fd7ebe110e59b07533d16d8f69e7"}, {0xbd, 0x0, "0465f2ba87b12b58f9e75cc51368cf444eb74ede4d6b6ea0ec1293c4f1a37522c382a2cf8dc01a427eec4d97c6e804c9b6db42ddad25293724124979ad2954f25d7c7ac66caeab6abaf20c06950ffcbb080f12f19e69984300aea16ea9d51d39aa714ef51a96ba30fba1f97cfcfc4f377eda20b8e30d95d742e93cc79c776773241a1276cd7ac92878fe1ebe8412aba23e0608434658bc203aadbc4718f5b40e2e9b98d570649e870773030c4e907703e31a2c24937e68ac71"}, {0xd, 0x0, "53e23a6a60b9d42247"}, {0xdd, 0x0, "3413897c93408f1373839748fb749c1f74d9004a004deb0adca5b4281836e87e4a51df6118bfd146560e35777ef019c38fc88be4a27be38b72a63393cf734c6eb29c3d9a464ec973e230c5fc58ea991770599eaa4778b7556f10962aa8176f3324c524c8fee4e3b953f2993e863ea6ffa5e5e92aa491fe1793268ce41d1c55624dcfb739d4da8a11fab368e86aaa04e064e05c41fbd29aa435a1e6300ded19313188ad744fb8dcb69c6df60733721324d4e2338680d5f35acc2efe42517e23dd4686a9bb1cc626dd686b625c9e89cf5848408044a42f400ed0"}, {0xdd, 0x0, "4f495ad319775107d776d42ab639b0eea3aa2c21c0a54a7274ee98f3958c21e759500062540bc20a010e24fd2346fec94b71f413ee9d815d8551b838ef5eb446707d423c591770004181032f906fc55da425f0e944b9a235eb50287797d8e6d36c92199551e58c702880be0d95d118b5a7369150738bf1767f792624a319a9e12d8bc65bb57223fc5d001d51ff169a7817f8cea7568e34afdc458a8ca5ff3b04fdb80dff965f5e76ff8e807abf39fcc52ecc1d5235a9f35c8bb66af49bc5ad7d13d424b397aa1f493e084522b37af4ff918e53f50a5043dc78"}, {0x3d9, 0x0, "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"}]}]}]}, 0x1ec4}}, 0x0) [ 263.946433][ T25] audit: type=1400 audit(1647910263.146:292): avc: denied { create } for pid=6660 comm="dhcpcd-run-hook" name="resolv.conf.gprs0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 263.963126][ T6691] loop3: detected capacity change from 0 to 131360 [ 264.032416][ T25] audit: type=1400 audit(1647910263.146:293): avc: denied { write } for pid=6660 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.gprs0.link" dev="tmpfs" ino=5578 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 264.068344][ T6691] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:51:03 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x0, 0x0, 0x1b4e, 0x0, 0x1}, 0x48) 00:51:03 executing program 5: pipe(&(0x7f0000000380)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000001640), r0) 00:51:03 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)={&(0x7f0000000780)='./file0/file0\x00'}, 0x10) [ 264.076503][ T25] audit: type=1400 audit(1647910263.146:294): avc: denied { append } for pid=6660 comm="dhcpcd-run-hook" name="resolv.conf.gprs0.link" dev="tmpfs" ino=5578 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 00:51:03 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec030200010052654973457246", 0x3b, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:51:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, 0x0, 0x0) 00:51:03 executing program 4: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 264.339674][ T25] audit: type=1400 audit(1647910263.546:295): avc: denied { unlink } for pid=6704 comm="rm" name="resolv.conf.gprs0.link" dev="tmpfs" ino=5578 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 264.393082][ T6711] loop3: detected capacity change from 0 to 131360 [ 264.423828][ T6711] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 264.493858][ T4950] I/O error, dev loop3, sector 131200 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 00:51:04 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:51:04 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x6, 0x6, &(0x7f0000000000)="38eb2710", 0x4) 00:51:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x6, 0x1b4e, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 00:51:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x38, 0x0, 0x0) 00:51:04 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:51:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x11, 0x0, 0x0) [ 264.898459][ T6728] loop3: detected capacity change from 0 to 131360 00:51:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) 00:51:04 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x6, 0x1e, &(0x7f0000000000)="38eb2710", 0x4) [ 264.979932][ T6728] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:51:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x481, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}]}, 0x1c}}, 0x0) 00:51:04 executing program 2: bind$l2tp(0xffffffffffffffff, 0x0, 0x0) 00:51:04 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @multicast1=0xac14143c, @local}, 0xc) 00:51:04 executing program 4: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:04 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:51:04 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) 00:51:04 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000240), 0x4) 00:51:04 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x42, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:51:04 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000340)) 00:51:05 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) [ 265.785280][ T6752] loop3: detected capacity change from 0 to 131360 [ 265.800703][ T25] audit: type=1400 audit(1647910265.006:296): avc: denied { setopt } for pid=6750 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 00:51:05 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x40) 00:51:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x33fe0}}, 0x0) [ 265.855294][ T6752] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:51:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x9, 0x0, 0x0) 00:51:05 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c}, {0x0, 0x0, 0x2012002}], 0x0, &(0x7f0000011100)) [ 265.934623][ T6762] ieee802154 phy0 wpan0: encryption failed: -22 00:51:05 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x6, 0x22, &(0x7f0000000000)="38eb2710", 0x4) [ 266.089492][ T6769] loop3: detected capacity change from 0 to 131360 00:51:05 executing program 4: openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 266.140493][ T6769] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 00:51:05 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:51:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) 00:51:05 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto(r0, 0x0, 0x0, 0x20048045, 0x0, 0x0) 00:51:05 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f8, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 00:51:05 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, 0x0) 00:51:06 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x46, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) [ 266.783338][ T25] audit: type=1400 audit(1647910265.996:297): avc: denied { write } for pid=6776 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 266.805132][ T6782] loop3: detected capacity change from 0 to 131360 00:51:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dummy0\x00', 0x3}) 00:51:06 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, 0x0) 00:51:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="e5780002000000000000040000000c"], 0x24}}, 0x0) 00:51:06 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x0) 00:51:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x103, 0x0, 0x0) [ 266.997989][ T6791] loop3: detected capacity change from 0 to 131360 00:51:06 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 267.033413][ T25] audit: type=1400 audit(1647910266.246:298): avc: denied { write } for pid=6794 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 00:51:06 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x4) 00:51:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 00:51:06 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="00400000ec170000132000001200000002fe00000020000000040000611cad49840300001e000000000000000010ec03020001005265497345724673", 0x3c, 0x10000}, {0x0, 0x0, 0x2012002}], 0x0, 0x0) 00:51:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x9}, 0x0) [ 267.752149][ T6804] loop3: detected capacity change from 0 to 131360 00:51:07 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x3a, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:51:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8}]}, 0x24}}, 0x0) 00:51:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x18, 0x0, 0x0) 00:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0xf}}, 0x0) 00:51:07 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:07 executing program 2: socketpair(0x2, 0x2, 0x1, &(0x7f00000002c0)) 00:51:07 executing program 5: recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 267.972831][ T4950] I/O error, dev loop3, sector 131200 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 00:51:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, 0x0, 0x0) 00:51:07 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r1, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x400f00, 0x4) 00:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x403}, 0x14}}, 0x0) 00:51:07 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x7fffffe, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:51:07 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, &(0x7f0000000080)) 00:51:07 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000002200)="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", 0xec1, 0x0, 0x0, 0x0) 00:51:07 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @long}, 0x14, &(0x7f0000000100)={&(0x7f0000000080)='$', 0x1}}, 0x840) 00:51:07 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 00:51:07 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x24, 0x0, 0x0) 00:51:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 00:51:08 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0)={[0x3]}, 0x8}) 00:51:08 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f000000adc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f000000aec0)={0x0, 0x0, &(0x7f000000ae80)={&(0x7f000000ae40)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) [ 269.485468][ T6827] syz-executor.2: vmalloc error: size 149020672, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 269.508345][ T6827] CPU: 0 PID: 6827 Comm: syz-executor.2 Not tainted 5.17.0-syzkaller #0 [ 269.516702][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.526757][ T6827] Call Trace: [ 269.530024][ T6827] [ 269.532949][ T6827] dump_stack_lvl+0xcd/0x134 [ 269.537644][ T6827] warn_alloc.cold+0x9b/0x189 [ 269.542325][ T6827] ? zone_watermark_ok_safe+0x290/0x290 [ 269.547866][ T6827] ? lockdep_hardirqs_on+0x79/0x100 [ 269.553088][ T6827] ? alloc_pages+0x16f/0x310 [ 269.557735][ T6827] ? __vmalloc_node_range+0x7bf/0x1060 [ 269.563220][ T6827] __vmalloc_node_range+0xe18/0x1060 [ 269.568531][ T6827] ? vfree_atomic+0xe0/0xe0 [ 269.573049][ T6827] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 269.579181][ T6827] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 269.585202][ T6827] ? xt_alloc_entry_offsets+0x3b/0x50 [ 269.590676][ T6827] __vmalloc_node+0x6f/0x90 [ 269.595196][ T6827] ? xt_alloc_entry_offsets+0x3b/0x50 [ 269.600583][ T6827] kvmalloc_node+0xe0/0x130 [ 269.605119][ T6827] xt_alloc_entry_offsets+0x3b/0x50 [ 269.610335][ T6827] translate_table+0x234/0x1750 [ 269.615274][ T6827] ? __might_fault+0xd1/0x170 [ 269.620000][ T6827] ? lock_downgrade+0x6e0/0x6e0 [ 269.624840][ T6827] ? ip6t_do_table+0x1a50/0x1a50 [ 269.629765][ T6827] do_ip6t_set_ctl+0x56e/0xb90 [ 269.634526][ T6827] ? __mutex_lock+0x21a/0x12f0 [ 269.639286][ T6827] ? compat_do_replace.constprop.0+0x470/0x470 [ 269.645431][ T6827] ? wait_for_completion_io_timeout+0x20/0x20 [ 269.651514][ T6827] ? selinux_secmark_relabel_packet+0xd0/0xd0 [ 269.657681][ T6827] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 269.663702][ T6827] nf_setsockopt+0x83/0xe0 [ 269.668108][ T6827] ipv6_setsockopt+0x122/0x180 [ 269.672897][ T6827] __sys_setsockopt+0x2db/0x610 [ 269.677811][ T6827] ? sock_common_recvmsg+0x1a0/0x1a0 [ 269.683088][ T6827] ? __ia32_sys_recv+0x100/0x100 [ 269.688028][ T6827] ? lock_downgrade+0x6e0/0x6e0 [ 269.692867][ T6827] __x64_sys_setsockopt+0xba/0x150 [ 269.697968][ T6827] ? syscall_enter_from_user_mode+0x21/0x70 [ 269.703866][ T6827] do_syscall_64+0x35/0xb0 [ 269.708316][ T6827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 269.714204][ T6827] RIP: 0033:0x7f93aa353049 [ 269.718615][ T6827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 269.738230][ T6827] RSP: 002b:00007f93a8cc8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.746641][ T6827] RAX: ffffffffffffffda RBX: 00007f93aa465f60 RCX: 00007f93aa353049 [ 269.754620][ T6827] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 269.762607][ T6827] RBP: 00007f93aa3ad08d R08: 00000000000005b8 R09: 0000000000000000 [ 269.770590][ T6827] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000000 [ 269.778647][ T6827] R13: 00007ffc5a0a2bbf R14: 00007f93a8cc8300 R15: 0000000000022000 00:51:08 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r1, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x400f00, 0x4) 00:51:08 executing program 0: socketpair(0x22, 0x0, 0x3, &(0x7f0000001740)) [ 269.786609][ T6827] [ 269.793809][ T6827] Mem-Info: [ 269.801690][ T6827] active_anon:370 inactive_anon:157885 isolated_anon:0 [ 269.801690][ T6827] active_file:3798 inactive_file:7755 isolated_file:0 [ 269.801690][ T6827] unevictable:768 dirty:45 writeback:0 [ 269.801690][ T6827] slab_reclaimable:20931 slab_unreclaimable:114298 [ 269.801690][ T6827] mapped:27622 shmem:1860 pagetables:892 bounce:0 [ 269.801690][ T6827] kernel_misc_reclaimable:0 [ 269.801690][ T6827] free:1241124 free_pcp:9639 free_cma:0 [ 269.848898][ T6827] Node 0 active_anon:1472kB inactive_anon:630608kB active_file:15120kB inactive_file:31020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110488kB dirty:176kB writeback:0kB shmem:4964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB kernel_stack:9908kB pagetables:3560kB all_unreclaimable? no [ 269.889038][ T6827] Node 1 active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 269.920018][ T6827] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.947284][ T6827] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 269.954388][ T6827] Node 0 DMA32 free:1001108kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:1472kB inactive_anon:630608kB active_file:15120kB inactive_file:31020kB unevictable:1536kB writepending:176kB present:3129332kB managed:2716696kB mlocked:0kB bounce:0kB free_pcp:37880kB local_pcp:15748kB free_cma:0kB [ 269.985355][ T6827] lowmem_reserve[]: 0 0 0 0 0 [ 269.990081][ T6827] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.016716][ T6827] lowmem_reserve[]: 0 0 0 0 0 [ 270.025275][ T6827] Node 1 Normal free:3949340kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:476kB local_pcp:240kB free_cma:0kB [ 270.061027][ T6827] lowmem_reserve[]: 0 0 0 0 0 [ 270.066096][ T6827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.079183][ T6827] Node 0 DMA32: 215*4kB (UME) 260*8kB (UME) 16*16kB (UME) 2*32kB (UM) 3*64kB (ME) 2*128kB (UE) 1*256kB (E) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 243*4096kB (M) = 1002876kB [ 270.096783][ T6827] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 270.108675][ T6827] Node 1 Normal: 5*4kB (UME) 197*8kB (UE) 136*16kB (UE) 89*32kB (UE) 63*64kB (UME) 35*128kB (UM) 10*256kB (UE) 7*512kB (UE) 0*1024kB 0*2048kB 959*4096kB (M) = 3949340kB [ 270.128241][ T6827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.142040][ T6827] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.151420][ T6827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.161040][ T6827] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 270.170390][ T6827] 13413 total pagecache pages [ 270.175098][ T6827] 0 pages in swap cache [ 270.179241][ T6827] Swap cache stats: add 0, delete 0, find 0/0 [ 270.185378][ T6827] Free swap = 0kB [ 270.189091][ T6827] Total swap = 0kB [ 270.192869][ T6827] 2097051 pages RAM [ 270.196667][ T6827] 0 pages HighMem/MovableOnly [ 270.201316][ T6827] 384532 pages reserved [ 270.205513][ T6827] 0 pages cma reserved 00:51:09 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8924, &(0x7f0000000000)={'vxcan1\x00'}) 00:51:09 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8922, &(0x7f0000000080)) 00:51:09 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x1, {0x0, 0x0, 0x4}}, 0x18) 00:51:09 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x89e3, &(0x7f0000001440)={@null, 0x0, 'hsr0\x00'}) 00:51:09 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r1, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x400f00, 0x4) 00:51:09 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, 0x0, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:10 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) 00:51:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x300}, 0x0) 00:51:10 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0xffffffff, 0x0, 0xff000000, 0xff], [0xff000000, 0x0, 0xff, 0xffffff00], 'veth1_macvtap\x00', 'veth0\x00', {}, {}, 0x5e, 0x0, 0x3, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x1f}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xff000000, 0xff000000, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xff], 'vxcan1\x00', '\x00', {0xff}, {0xff}, 0x3a, 0xfb}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) [ 270.834034][ T6866] team0: mtu less than device minimum 00:51:10 executing program 2: pipe(&(0x7f0000000a40)) 00:51:10 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f8, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 00:51:10 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040)=0xc7, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f00000001c0)=""/184, &(0x7f0000000280)=0xb8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa4000801}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=@bridge_getlink={0x6c, 0x12, 0x1, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x6c20, 0x4}, [@IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xb4a}, @IFLA_PORT_PROFILE={0x9, 0x2, 'vxcan1\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8}]}, @IFLA_LINKMODE={0x0, 0x11, 0x4}, @IFLA_CARRIER={0x5}, @IFLA_PROMISCUITY={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'gretap0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) 00:51:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FTM_RESPONDER={0xea4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xea0, 0x3, "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"}]}]}, 0xec4}}, 0x20008800) [ 270.908846][ T6873] x_tables: duplicate underflow at hook 2 00:51:10 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_nat_t_port={0x1, 0xeefdac3d0aeeb3a7}, @sadb_key={0x1, 0x8}]}, 0x88}}, 0x0) [ 271.005479][ T6878] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.020889][ T6879] x_tables: duplicate underflow at hook 1 00:51:10 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0xd0, 0x438, 0x208, 0x320, 0x208, 0x528, 0x528, 0x528, 0x528, 0x528, 0x8000000, 0x0, {[{{@ipv6={@private1, @private1, [], [], 'wg2\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@rand_addr=' \x01\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 00:51:10 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:51:10 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400f00, 0x4) 00:51:10 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, 0x0, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:10 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) unshare(0x8020080) 00:51:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x77, 0x0, 0x0) 00:51:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x6, 0x1b4e, 0x0, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={0x0, r0}, 0x10) 00:51:10 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x6, 0x1b4e, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 00:51:10 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x89e7, &(0x7f0000001440)={@null, 0x0, 'hsr0\x00'}) 00:51:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000100)) 00:51:10 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0xfffffffffffffffe, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x9) 00:51:10 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, 0x0, 0x0) 00:51:11 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8910, &(0x7f0000000080)) 00:51:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 00:51:11 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400f00, 0x4) 00:51:11 executing program 3: pipe(&(0x7f0000000380)={0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) 00:51:11 executing program 2: socket$inet(0x2, 0x0, 0x1000) 00:51:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x25, 0x0, 0x0) 00:51:11 executing program 0: sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0) 00:51:11 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, 0x0, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x6, 0x1b4e}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, 0x0, &(0x7f0000000180)}, 0x20) 00:51:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x84, 0x4, 0x0, 0x0) 00:51:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYRES32], 0x54}}, 0x0) 00:51:11 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socketpair(0xf, 0x0, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:51:11 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x6, 0x16, &(0x7f0000000000)="38eb2710", 0x4) 00:51:11 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0xb8}}, 0x10) 00:51:12 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400f00, 0x4) 00:51:12 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_buf(r0, 0x6, 0x10, 0x0, 0x0) 00:51:12 executing program 5: unshare(0x8020080) 00:51:12 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x6, 0x9, &(0x7f0000000000)="e73d0000", 0x4) 00:51:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x2, &(0x7f00000004c0)=@raw=[@exit, @func], &(0x7f0000000540)='GPL\x00', 0x4, 0x9d, &(0x7f0000000580)=""/157, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:12 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000140)) 00:51:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, "c183948bba354d73353ab8d963f82d72e06ba26cad863d54356ab138bcfb0d7866ece842147a4a5755c573cd3246b1ac82bf9ab2f07bf937c073c0e868f6f90588cfad65177976d5decf61bc3c5cfb47"}, 0xd8) 00:51:12 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1401, 0x481b3b07d194083b}, 0x10}}, 0x0) 00:51:12 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 00:51:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x0, "a9b7fc", 0x1}) [ 273.616995][ T25] audit: type=1400 audit(1647910272.826:299): avc: denied { create } for pid=6954 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 00:51:12 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) [ 273.701188][ T25] audit: type=1400 audit(1647910272.846:300): avc: denied { write } for pid=6954 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 00:51:13 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x0, 0x4) 00:51:13 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 00:51:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x0, 0x0, 0x0, 0x21, 0x1}, 0x48) 00:51:13 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a0, &(0x7f0000000000)={'vxcan1\x00'}) 00:51:13 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:13 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), 0x4) 00:51:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0xfffffffffffffffe}, 0x300}, 0x0) [ 274.426882][ T25] audit: type=1400 audit(1647910273.636:301): avc: denied { ioctl } for pid=6964 comm="syz-executor.5" path="socket:[41896]" dev="sockfs" ino=41896 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 00:51:13 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg0\x00'}) 00:51:13 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5460, 0x0) 00:51:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x10}}], 0x10}, 0x0) 00:51:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FTM_RESPONDER={0xea4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xe9d, 0x3, "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"}]}]}, 0xec4}}, 0x0) 00:51:13 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0x10}}, 0x0) [ 274.600386][ T25] audit: type=1400 audit(1647910273.806:302): avc: denied { ioctl } for pid=6979 comm="syz-executor.3" path="socket:[41911]" dev="sockfs" ino=41911 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 00:51:14 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x0, 0x4) 00:51:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) 00:51:14 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8943, &(0x7f0000000000)={'vxcan1\x00'}) 00:51:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}]}, 0x34}}, 0x0) 00:51:14 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x5421, &(0x7f0000001440)={@null, 0x0, 'hsr0\x00'}) 00:51:14 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x21, 0x0, 0x0) 00:51:14 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) 00:51:14 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x5421, 0x0) 00:51:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0) 00:51:14 executing program 0: socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 00:51:14 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8937, &(0x7f0000000080)) [ 275.495974][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 275.802899][ T3679] Bluetooth: hci0: command 0x0401 tx timeout 00:51:15 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x0, 0x4) 00:51:15 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8924, &(0x7f0000000080)) 00:51:15 executing program 5: pselect6(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, 0x0) 00:51:15 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 00:51:15 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x80086601, 0x0) 00:51:15 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x21, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x20}}, 0x0) 00:51:15 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0xf, &(0x7f0000000000)="38eb2710", 0x4) 00:51:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x200}, 0x14}}, 0x8000) 00:51:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}}}}) 00:51:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60}}, {{@ipv6={@empty, @mcast1, [], [], 'veth1_vlan\x00', 'syzkaller0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) [ 276.519112][ T7040] x_tables: duplicate underflow at hook 3 00:51:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x0) 00:51:16 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'some'}, 0x2f) 00:51:16 executing program 3: unshare(0x20040000) 00:51:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:51:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x48) 00:51:16 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:16 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pressure(r0, 0x0, 0x0) 00:51:16 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc92) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) 00:51:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000b80)='GPL\x00', 0x6, 0xd8, &(0x7f0000000bc0)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:16 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@map_idx]}, &(0x7f0000000b80)='GPL\x00', 0x2, 0xd8, &(0x7f0000000bc0)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:16 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000780)=[{r0, 0x2210}], 0x1, 0x0, 0x0, 0x0) 00:51:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='('], 0x138}}, 0x0) 00:51:17 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x0) 00:51:17 executing program 3: r0 = socket(0x1, 0x5, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 00:51:17 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x20000e00) 00:51:17 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:17 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x8, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xa4}}, 0x0) 00:51:17 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x7b, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="05034a00a8fd3e0000000200c52cf7c25975e605b02f08007f2b2ff0dac8897c6b04876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0xfdf8, 0x0, 0x0, 0x1d3) 00:51:17 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc92) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) 00:51:17 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "040d7718560f8b88b6746ad0405aaa2ce0c122fc6af339280257ac98fa6d93314a71bc1c8ed4e32628565fff0eb45df3aeeb53491999ef82775013c114b12abb"}, 0x48, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "040d7718560f8b88b6746ad0405aaa2ce0c122fc6af339280257ac98fa6d93314a71bc1c8ed4e32628565fff0eb45df3aeeb53491999ef82775013c114b12abb"}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r1) 00:51:17 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x8, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xa4}}, 0x0) 00:51:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x15) [ 278.195707][ T25] audit: type=1400 audit(1647910277.406:303): avc: denied { ioctl } for pid=7078 comm="syz-executor.5" path="socket:[42806]" dev="sockfs" ino=42806 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 00:51:17 executing program 3: socketpair(0x27, 0x0, 0x0, 0x0) 00:51:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 00:51:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f00, 0x0) 00:51:18 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0) 00:51:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) 00:51:18 executing program 2: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0xeecd43ec06c53cf) 00:51:18 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x3650c40, 0x0, 0x0, 0x0, 0xa, "afdd8fd596f39f35ff16986a965ee79b03cc4d"}) 00:51:18 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 00:51:18 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3d0, 0x1f8, 0x1f8, 0x110, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'gre0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x1}}}, {{@arp={@loopback, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 00:51:18 executing program 3: clock_gettime(0x0, &(0x7f0000002040)) 00:51:18 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x448680, 0x0) 00:51:18 executing program 0: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "040d7718560f8b88b6746ad0405aaa2ce0c122fc6af339280257ac98fa6d93314a71bc1c8ed4e32628565fff0eb45df3aeeb53491999ef82775013c114b12abb"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x0}, r1) [ 279.164654][ T7109] x_tables: duplicate underflow at hook 1 [ 279.170475][ T25] audit: type=1400 audit(1647910278.376:304): avc: denied { ioctl } for pid=7108 comm="syz-executor.2" path="socket:[43158]" dev="sockfs" ino=43158 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 00:51:18 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000740)={0x6eba, 0x0, 0x0, 'queue1\x00'}) 00:51:19 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) 00:51:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getstats={0x1c, 0x5e, 0x731, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) 00:51:19 executing program 0: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0xfffffffffffffe63) 00:51:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='attr/prev\x00') ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, 0x0) 00:51:19 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:19 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000002c0), 0x4) [ 279.931561][ T25] audit: type=1400 audit(1647910279.136:305): avc: denied { ioctl } for pid=7119 comm="syz-executor.2" path="/dev/ppp" dev="devtmpfs" ino=689 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 00:51:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@can_newroute={0x2c, 0x18, 0xb15096974dc8bd69, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "965cbf3f09fc7498"}, 0x2}}]}, 0x2c}}, 0x0) 00:51:19 executing program 2: eventfd(0x0) pselect6(0x40, &(0x7f0000000540), &(0x7f0000000580)={0xa0c}, 0x0, 0x0, 0x0) 00:51:19 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x105002) 00:51:19 executing program 0: semop(0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x2aaaaaaaaaaaab45) 00:51:19 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "040d7718560f8b88b6746ad0405aaa2ce0c122fc6af339280257ac98fa6d93314a71bc1c8ed4e326285609000000000000005013c114b12abb00"}, 0x48, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, r1) 00:51:19 executing program 3: semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000001600)=[{0x0, 0x0, 0x1000}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1) 00:51:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3e0, 0xe8, 0x0, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@random="62bd295b229b"}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="baacc480a304", @multicast2, @multicast1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 00:51:19 executing program 1: r0 = socket(0x29, 0x5, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x408c1) 00:51:19 executing program 5: io_setup(0x5, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000980)=[0xfffffffffffffffc]) 00:51:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "c8238b"}) [ 280.183740][ T7144] x_tables: duplicate underflow at hook 1 00:51:20 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:20 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 00:51:20 executing program 2: mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd, 0x30, 0xffffffffffffffff, 0x0) 00:51:20 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x40001) 00:51:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'xfrm0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@loopback, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @mac=@local, @multicast1, @private, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 00:51:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)) 00:51:20 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65bd4b2e137708cef895bc4451beaaab6c370f27f8f124a8145487e6f1a1973a"}) 00:51:20 executing program 5: r0 = socket(0x29, 0x5, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0xffffff79}}, 0x0) [ 280.828986][ T25] audit: type=1400 audit(1647910280.036:306): avc: denied { map } for pid=7157 comm="syz-executor.3" path="/dev/nvram" dev="devtmpfs" ino=620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 280.829992][ T7159] x_tables: duplicate underflow at hook 1 00:51:20 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) 00:51:20 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000001540)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r1, 0x0, 0x0, 0x1}}, 0x20) 00:51:20 executing program 0: bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) 00:51:20 executing program 1: openat$vfio(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) 00:51:20 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:20 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x60801, 0x0) 00:51:20 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4081, 0x0) 00:51:20 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, 0x0, 0x0, 0x80800) syz_init_net_socket$rose(0xb, 0x5, 0x0) 00:51:20 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 00:51:20 executing program 5: io_setup(0x100, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) io_getevents(r0, 0x8, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, r1+60000000}) io_destroy(r0) [ 281.764667][ T25] audit: type=1400 audit(1647910280.976:307): avc: denied { create } for pid=7176 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 00:51:21 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0) 00:51:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 00:51:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)='5') 00:51:21 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0xc020660b, 0x0) [ 281.837885][ T25] audit: type=1400 audit(1647910280.976:308): avc: denied { accept } for pid=7176 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 00:51:21 executing program 5: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/61) 00:51:21 executing program 3: socketpair(0x1d, 0x6, 0x3, &(0x7f0000000000)) [ 282.067229][ T7199] can: request_module (can-proto-3) failed. [ 282.292879][ T3679] Bluetooth: hci0: command 0x0401 tx timeout 00:51:21 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @remote, 'vlan1\x00'}}, 0x1e) 00:51:21 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000740), 0xf) 00:51:21 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x6dc61546b9e91d01, 0x0) 00:51:21 executing program 5: getrusage(0x4a3daa3a95bda3f3, 0x0) 00:51:21 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:21 executing program 3: setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) 00:51:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r0) 00:51:22 executing program 3: pselect6(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0) 00:51:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x3, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYRES16=0x0], 0x34}, 0x1, 0x0, 0x0, 0x20000008}, 0x78044) [ 282.759955][ T25] audit: type=1400 audit(1647910281.966:309): avc: denied { write } for pid=7203 comm="syz-executor.2" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 00:51:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x2}}}, {{@arp={@rand_addr, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'geneve0\x00', 'geneve1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 00:51:22 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8ee13408ba0f37dd, 0x0) [ 282.864203][ T25] audit: type=1400 audit(1647910282.006:310): avc: denied { open } for pid=7203 comm="syz-executor.2" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 00:51:22 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) [ 282.908917][ T7219] x_tables: duplicate underflow at hook 1 00:51:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000190001953d00620769c4cbc51c"], 0x24}}, 0x0) 00:51:22 executing program 2: keyctl$search(0xa, 0x0, &(0x7f0000000280)='big_key\x00', 0x0, 0x0) 00:51:22 executing program 0: eventfd(0xe6b5) pselect6(0x40, &(0x7f0000000540)={0x9}, 0x0, &(0x7f00000005c0), &(0x7f0000000600)={0x77359400}, 0x0) 00:51:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10) [ 283.038705][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 00:51:22 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', 0x0}) 00:51:22 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:51:22 executing program 3: clock_settime(0x0, &(0x7f00000006c0)) 00:51:22 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4081) 00:51:22 executing program 1: recvmsg$can_raw(0xffffffffffffffff, 0x0, 0xe0010060) 00:51:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000140), 0x4) 00:51:22 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 00:51:22 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) 00:51:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@bridge_setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x20}}, 0x0) 00:51:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}) 00:51:23 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x42d80) 00:51:23 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "6503522d7656a1cc"}}}]}, 0x2c}}, 0x0) 00:51:23 executing program 0: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000040)=""/40) 00:51:23 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x1, 0xffffffffffffffff, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4a8}) 00:51:23 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="04000000640500000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000c001"], 0x48}}, 0x0) 00:51:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x0, 0x0, {0x7, r2}}, 0x18}}, 0x0) 00:51:23 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$usbfs(r0, &(0x7f0000000100)=""/66, 0x42) read$usbfs(r0, 0x0, 0x0) 00:51:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 284.510803][ T25] audit: type=1400 audit(1647910283.713:311): avc: denied { connect } for pid=7264 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 00:51:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @remote}, @IFA_CACHEINFO={0x14}]}, 0x40}}, 0x0) 00:51:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}]}, 0x30}}, 0x0) 00:51:23 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x18}, 0xc) [ 284.642791][ T25] audit: type=1400 audit(1647910283.753:312): avc: denied { write } for pid=7264 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 00:51:23 executing program 5: r0 = getpid() r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x432) 00:51:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@ipv6_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r2}}]}, 0x28}}, 0x0) 00:51:24 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, 0x0) 00:51:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000740)={0x1f, 0x0, 0x4}, 0x6) 00:51:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_GETNSID={0x14, 0x5a, 0x1}, 0x14}}, 0x0) 00:51:24 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:24 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) 00:51:24 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="04000000640500000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000c001"], 0x48}}, 0x0) [ 285.438606][ T25] audit: type=1400 audit(1647910284.643:313): avc: denied { bind } for pid=7282 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 00:51:24 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x20080, 0x0) 00:51:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x7, @mcast1, 0x2345}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0xc2, @mcast1, 0x7}, @in6={0xa, 0x4e22, 0x7cc1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8be}, @in={0x2, 0x4e22, @remote}], 0x74) sendto$inet(r0, &(0x7f0000000040)="f4", 0x33, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000800)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}]}, 0x56}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040001) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x40, 0x9, 0x200, 0x90, 0x1]}, &(0x7f0000000280)=0x78) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @dev}, {0x2, 0x4e23, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}) 00:51:24 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x1411, 0x1}, 0x10}}, 0x0) 00:51:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 00:51:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000240)=0xfffff800, 0x4) 00:51:24 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, 0x0) [ 285.604856][ T25] audit: type=1400 audit(1647910284.813:314): avc: denied { connect } for pid=7299 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 00:51:24 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000800)={0x2, 0x200, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) sendto$inet(r0, &(0x7f0000000080)="8f", 0x1, 0x20040040, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) 00:51:24 executing program 0: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x432) [ 285.723815][ T25] audit: type=1400 audit(1647910284.813:315): avc: denied { read } for pid=7297 comm="syz-executor.2" name="nullb0" dev="devtmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 00:51:25 executing program 3: openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) [ 285.779091][ T25] audit: type=1400 audit(1647910284.813:316): avc: denied { open } for pid=7297 comm="syz-executor.2" path="/dev/nullb0" dev="devtmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 285.845236][ T25] audit: type=1400 audit(1647910284.843:317): avc: denied { name_connect } for pid=7299 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 285.909457][ T25] audit: type=1400 audit(1647910284.913:318): avc: denied { bind } for pid=7299 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 285.932632][ T25] audit: type=1400 audit(1647910284.913:319): avc: denied { node_bind } for pid=7299 comm="syz-executor.3" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 285.954996][ T25] audit: type=1400 audit(1647910284.913:320): avc: denied { ioctl } for pid=7299 comm="syz-executor.3" path="socket:[43544]" dev="sockfs" ino=43544 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 00:51:25 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:25 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 00:51:25 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0xf81, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0}) 00:51:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@can_newroute={0x2c, 0x18, 0xb15096974dc8bd69, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "d69dd49ea4969eb3"}, 0x4}}]}, 0x2c}}, 0x0) 00:51:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) 00:51:25 executing program 0: add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "040d7718560f8b88b6746ad0405aaa2ce0c122fc6af339280257ac98fa6d93314a71bc1c8ed4e32628565fff0eb45df3aeeb53491999ef82775013c114b12abb"}, 0x48, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r0) 00:51:25 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d16, &(0x7f0000000080)) 00:51:25 executing program 0: mount$9p_fd(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) 00:51:25 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x8) 00:51:25 executing program 3: syz_open_dev$dri(&(0x7f0000000e00), 0x0, 0x480000) 00:51:25 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 286.503753][ T7329] 9pnet_virtio: no channels available for device . 00:51:25 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 00:51:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000001540)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20) 00:51:26 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 00:51:26 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:26 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f00000000c0)) 00:51:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vcan0\x00'}]}, 0x30}}, 0x0) 00:51:26 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x9, 0x0) [ 287.372890][ T7342] QAT: Invalid ioctl -1066363887 00:51:26 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) 00:51:26 executing program 3: pipe2$9p(&(0x7f00000001c0), 0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 00:51:26 executing program 5: sigaltstack(&(0x7f0000002540)={&(0x7f0000001540)=""/4096, 0x0, 0x1000}, &(0x7f0000002640)={0x0}) 00:51:26 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) 00:51:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000200)={0x0, 0x0, "fa1dec"}) 00:51:26 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 00:51:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf}}) 00:51:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000000)="b1") 00:51:27 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:27 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) 00:51:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PREF={0x5, 0x14, 0x3}]}, 0x24}}, 0x0) 00:51:27 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2a2242, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 00:51:27 executing program 2: accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0xc0000) 00:51:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf}}) 00:51:27 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xef2]}, 0x8}) 00:51:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf}}) 00:51:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$alg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000240)="ad", 0x1}], 0x3}, 0x0) 00:51:27 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "040d7718560f8b88b6746ad0405aaa2ce0c122fc6af339280257ac98fa6d93314a71bc1c8ed4e32628565fff0eb45df3aeeb53491999ef82775013c114b12abb"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "040d7718560f8b88b6746ad0405aaa2ce0c122fc6af339280257ac98fa6d93314a71bc1c8ed4e32628565fff0eb45df3aeeb53491999ef82775013c114b12abb"}, 0x48, 0xfffffffffffffffe) 00:51:27 executing program 3: syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) 00:51:27 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0x1f0, 0x1f0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'xfrm0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@arp={@loopback, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @mac=@local, @multicast1, @private, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) [ 288.489289][ T7390] x_tables: duplicate underflow at hook 1 00:51:28 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf}}) 00:51:28 executing program 3: ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)) getresuid(&(0x7f0000000140), 0x0, 0x0) 00:51:28 executing program 0: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0xee01}}) 00:51:28 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[], 0x48}}, 0x0) 00:51:28 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000240), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:51:28 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 00:51:28 executing program 0: r0 = socket(0x22, 0x2, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) 00:51:28 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) 00:51:28 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:51:28 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x0) 00:51:28 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xc4400, 0x0) [ 289.722902][ T3679] Bluetooth: hci0: command 0x0401 tx timeout 00:51:29 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:29 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x6, &(0x7f0000000000)=0x5) 00:51:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000006001c00000000005a"], 0x30}}, 0x0) 00:51:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)) 00:51:29 executing program 1: socketpair(0x1, 0x0, 0x400, 0x0) 00:51:29 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) 00:51:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000580), 0x0, &(0x7f0000000600)={0x9}, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 00:51:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0xff) getpeername$l2tp(r0, 0x0, 0x0) 00:51:29 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 00:51:29 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) [ 290.196481][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:51:29 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 00:51:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) [ 290.348609][ T25] kauditd_printk_skb: 6 callbacks suppressed [ 290.348626][ T25] audit: type=1400 audit(1647910289.553:327): avc: denied { read } for pid=7434 comm="syz-executor.0" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 290.379080][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.419268][ T25] audit: type=1400 audit(1647910289.563:328): avc: denied { write } for pid=7437 comm="syz-executor.1" name="ip_vs" dev="proc" ino=4026533483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 00:51:30 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000004b00)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:51:30 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000000180)=[{{&(0x7f0000000040)=@abs, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)}}], 0x40, 0x0, 0x0) 00:51:30 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @remote, @val, {@ipv6}}, 0x0) 00:51:30 executing program 0: openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, &(0x7f0000003280), &(0x7f00000032c0)="c84f97834b87d20d52b5543047743507c148ef9b1b11fa06ebf7b28b2c43d1c8440aa10f4f8f96ef96fe21d69c6c85411aa25eb0a8eab82db1084630405f855ac47cb844a20d5f679ecc9655e4aa92e762bbc47102b6fc0273a9ee77416a733e62065724f3a910a8418a730b959c57acc16b8e2365766809294371c73cfae80e268275094756b98db1ec7800fa4bdc924702b9b70851b936fd407b4bc16daaf78a64322c512e05814f1737fb0876611aeeedda5dc3dae1c5ed773385ae8023") 00:51:30 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@multicast, @random="e0d35b1008bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x8, 0x0, 0x0, 0x3, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) [ 291.113578][ T25] audit: type=1400 audit(1647910290.323:329): avc: denied { name_bind } for pid=7440 comm="syz-executor.2" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 00:51:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000004b00)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:51:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}]}, 0x38}}, 0x0) 00:51:30 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup2(r1, r0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x102, &(0x7f0000000140), &(0x7f0000000000)=0x8) 00:51:30 executing program 5: syz_usb_connect$cdc_ncm(0x5, 0x7d, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x8, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xbf1, 0x3}, {0x6, 0x24, 0x1a, 0x7, 0x22}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x0, 0x0, 0x9}, @mdlm_detail={0x4, 0x24, 0x13, 0x7}, @mdlm_detail={0x4, 0x24, 0x13, 0x81}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x0, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x5, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xe5, 0x7, 0x35}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x8, 0x0, 0x81, 0x20, 0x4}, 0xf, &(0x7f0000000040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xd1, 0x1, 0xffff}]}, 0x6, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1409}}, {0x0, 0x0}, {0x21, &(0x7f0000000300)=@string={0x21, 0x3, "8aa9c36b394c05bf126fa8b3b97227f2b8354d138f2c42317793e7c12895b0"}}, {0x79, &(0x7f0000000340)=@string={0x79, 0x3, "381520ad53cf03df7170921fcfd17ebce6be87c591d8421355701d611cff818a62cf7dbfbb0b5f01a1bd36d34157191b486d22def89fa618b48e6346e8a4798792ac6a9a70cf74a8cb63836e4d9893aa9c423cffc45483bf67ca658589614b09022a2ed69fa5ca498ba1c6a1fa80f5c8473ac6a41edcf9"}}, {0x75, &(0x7f0000000400)=@string={0x75, 0x3, "86ff969e2083efc3fa46ea2fdf18fe6f6c999902473601a1e6bb9503c1576fdfa01e49bf7f635e4f2a3793e04a578048fe85cf52ce543b9a66299b4d77e0356ce1387124b8e8b14081ebb7bde195e78a253d3b07687b8cd5c440139b97a47b68e563a949661331707779421909f0de9dc057f3"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x459}}]}) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0) 00:51:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000004b00)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) [ 291.335245][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.662788][ T3261] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 291.912824][ T3261] usb 6-1: Using ep0 maxpacket: 32 00:51:31 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:31 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x140a, 0xd86404c7984c8309, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}}, 0x0) 00:51:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000004b00)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 00:51:31 executing program 0: r0 = syz_io_uring_setup(0x3d04, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 00:51:31 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 292.043100][ T3261] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.053346][ T3261] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 292.063705][ T3261] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 00:51:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x2c}}, 0x0) 00:51:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:31 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000140)=0x4, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) connect$unix(r1, &(0x7f0000000180), 0x6e) 00:51:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) [ 292.301932][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:51:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80804120, &(0x7f0000000100)) r4 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2, &(0x7f0000000480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}], [{@smackfsroot={'smackfsroot', 0x3d, 'batadv\x00'}}, {@smackfshat}, {@smackfsroot={'smackfsroot', 0x3d, ')\'$\b]!%'}}]}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 292.493082][ T3261] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.509870][ T3261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.520137][ T3261] usb 6-1: Product: ꦊ毃䰹뼅漒뎨犹㖸ፍⲏㅂ鍷쇧锨 [ 292.555873][ T3261] usb 6-1: SerialNumber: ᔸ괠콓灱ᾒ퇏뱾뻦얇ፂ灕愝＜誁콢뽽஻ş붡팶坁ᬙ浈鿸ᢦ躴䙣ꓨ蝹겒驪콰꡴揋溃額ꪓ䊜＼哄뾃쩧蕥憉ो⨂혮ꖟ䧊ꆋꇆ胺죵㩇꓆ [ 292.864383][ T3261] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 292.874512][ T3261] cdc_ncm 6-1:1.0: bind() failure [ 292.895220][ T3261] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 292.902510][ T3261] cdc_ncm 6-1:1.1: bind() failure [ 292.919006][ T3261] usb 6-1: USB disconnect, device number 8 [ 293.243007][ T3261] Bluetooth: hci2: command 0x0406 tx timeout [ 293.249432][ T3261] Bluetooth: hci3: command 0x0406 tx timeout [ 293.255908][ T3261] Bluetooth: hci4: command 0x0406 tx timeout [ 293.262187][ T3261] Bluetooth: hci5: command 0x0406 tx timeout [ 293.269167][ T3261] Bluetooth: hci0: command 0x0406 tx timeout [ 293.275429][ T3261] Bluetooth: hci1: command 0x0406 tx timeout 00:51:32 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80804120, &(0x7f0000000100)) r4 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2, &(0x7f0000000480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}], [{@smackfsroot={'smackfsroot', 0x3d, 'batadv\x00'}}, {@smackfshat}, {@smackfsroot={'smackfsroot', 0x3d, ')\'$\b]!%'}}]}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:51:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00005fd000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:32 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:32 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80804120, &(0x7f0000000100)) r4 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2, &(0x7f0000000480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}], [{@smackfsroot={'smackfsroot', 0x3d, 'batadv\x00'}}, {@smackfshat}, {@smackfsroot={'smackfsroot', 0x3d, ')\'$\b]!%'}}]}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:51:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$AUDIT_USER(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000002480)=ANY=[], 0xec4}}, 0x0) 00:51:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:33 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 293.886202][ T25] audit: type=1400 audit(1647910293.083:330): avc: denied { create } for pid=7509 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 00:51:33 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000140)={@multicast, @random="e0d35b1008bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x2802, {0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, {[@rr={0x7, 0x13, 0x0, [@rand_addr, @loopback, @private, @rand_addr]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x0, [@loopback, @rand_addr, @broadcast, @loopback]}]}}}}}}}, 0x0) 00:51:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:33 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x140a, 0xd86404c7984c8309, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}}, 0x0) 00:51:33 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 00:51:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:33 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80804120, &(0x7f0000000100)) r4 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2, &(0x7f0000000480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}], [{@smackfsroot={'smackfsroot', 0x3d, 'batadv\x00'}}, {@smackfshat}, {@smackfsroot={'smackfsroot', 0x3d, ')\'$\b]!%'}}]}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:51:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/sockstat\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/102, 0x66}], 0x1) 00:51:33 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:33 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:33 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:34 executing program 5: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000100)={0x8}, 0x0, 0x0, 0x0) 00:51:34 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:34 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:34 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB='c']) 00:51:34 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) [ 295.346350][ T7560] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 00:51:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) openat(0xffffffffffffffff, 0x0, 0x40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80804120, 0x0) r2 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in=@local, @in6=@private1}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f0000000440)=0xe4) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 00:51:34 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x560e, &(0x7f0000000000)) 00:51:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:34 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000300)=""/148, 0x94}], 0x1, 0x0, 0x0) 00:51:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:35 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 00:51:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:35 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) [ 295.924975][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! 00:51:35 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2, 0x4}}, 0x24) 00:51:35 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40c00, 0x0) [ 296.138136][ T25] audit: type=1400 audit(1647910295.343:331): avc: denied { create } for pid=7589 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 296.182148][ T25] audit: type=1400 audit(1647910295.373:332): avc: denied { bind } for pid=7589 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 296.237724][ T25] audit: type=1400 audit(1647910295.383:333): avc: denied { append } for pid=7591 comm="syz-executor.3" name="btrfs-control" dev="devtmpfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 00:51:35 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:35 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:35 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80804120, 0x0) 00:51:35 executing program 5: syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9) 00:51:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80804120, &(0x7f0000000100)) r4 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}], [{@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, 'batadv\x00'}}, {@smackfshat}, {@smackfsroot={'smackfsroot', 0x3d, ')\'$\b]!%'}}]}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:51:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x8100000000000000}) 00:51:35 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000340), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000380), 0x10) [ 296.616830][ T3646] Bluetooth: hci0: ACL packet for unknown connection handle 0 00:51:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:36 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)={0xf4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0xd5, 0x33, @beacon={@wo_ht={{}, {}, @broadcast, @device_b, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0x3}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x6, "e39d250e50e6"}, {0xdd, 0x43, "98e3f43ce93cc621f2a890b29de3934e8dd2c4afc365055f048b9e63e2f82f87facb9653d62fbe844f3b4b2c0442c1d1de2ba82f29a81a345c8b4607324c98866f8e87"}, {0xdd, 0x6, "f9133618769c"}, {0xdd, 0x15, "67d548b83ae6c9653bf73d258dcc4d28ce80abad16"}, {0xdd, 0x19, "bd13cbd66cfe1534d28498c83f493dcb24110cfaf93093094b"}]}}]}, 0xf4}}, 0x0) sendfile(r5, r4, 0x0, 0x10000a006) 00:51:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000300)=0x4, 0x4) [ 297.044328][ T25] audit: type=1400 audit(1647910296.243:334): avc: denied { setopt } for pid=7621 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 297.161535][ T25] audit: type=1804 audit(1647910296.273:335): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir57139682/syzkaller.Om58Lb/322/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 00:51:36 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4ad, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 00:51:36 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:36 executing program 5: r0 = socket$inet(0xa, 0x5, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000040)=0x1e) 00:51:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r3, 0x80804120, &(0x7f0000000100)) r4 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}], [{@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, 'batadv\x00'}}, {@smackfshat}, {@smackfsroot={'smackfsroot', 0x3d, ')\'$\b]!%'}}]}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:51:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) 00:51:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, r1) 00:51:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, r1) 00:51:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:37 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:51:37 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:37 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a1, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 00:51:37 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:37 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shutdown(r0, 0x0) 00:51:37 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8971, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:51:37 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') 00:51:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'veth0_macvtap\x00', {}, 0xffff}) 00:51:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:37 executing program 3: shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 00:51:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') read(r0, &(0x7f0000000040)=""/95, 0x5f) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/148, 0x94}], 0x1, 0x200000000000004, 0x0) 00:51:38 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:38 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 00:51:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:51:38 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x4, 0x0, &(0x7f0000000140)) 00:51:38 executing program 5: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "3c4411b86ad94034ab6ddf3e07eb267323cc581bf43e779219dc150ba2dcaf0e1851cc04baf1396d4fed9fd72d7ab47873e45465dad057101ced7ef157894549"}, 0x48, 0x0) 00:51:38 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) 00:51:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:51:38 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f0000000140)) 00:51:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'tunl0\x00'}) [ 299.365678][ T25] audit: type=1400 audit(1647910298.573:336): avc: denied { ioctl } for pid=7683 comm="syz-executor.0" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 00:51:38 executing program 5: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x2, 0x0, &(0x7f0000000140)) 00:51:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:51:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r1, 0x703}, 0x14}}, 0x0) 00:51:39 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:39 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4ad, 0x1}, 0x48) 00:51:39 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8940, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 00:51:39 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f4, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:51:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:39 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 00:51:39 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 00:51:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/148, 0x94}], 0x1, 0x200000000000004, 0x0) 00:51:39 executing program 0: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_usbip_server_init(0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) 00:51:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 00:51:39 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x140e, 0x1}, 0x10}}, 0x0) [ 300.575153][ T7727] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 300.582050][ T7727] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 300.601943][ T7732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=7732 comm=syz-executor.3 [ 300.649272][ T7727] vhci_hcd vhci_hcd.0: Device attached [ 300.706653][ T7728] vhci_hcd: connection closed [ 300.732390][ T3713] vhci_hcd: stop threads [ 300.745835][ T3713] vhci_hcd: release socket [ 300.751182][ T3713] vhci_hcd: disconnect device 00:51:40 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rpc\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) 00:51:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:51:40 executing program 3: add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) 00:51:40 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:40 executing program 0: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) select(0x40, &(0x7f0000000240), &(0x7f0000000300)={0xffffffffffffffb1, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x5, 0x10001, 0x8}, &(0x7f00000003c0)={0x0, r0/1000+10000}) 00:51:40 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x13, 0x0, &(0x7f0000000140)) 00:51:40 executing program 2: socketpair(0x18, 0x0, 0x40000, &(0x7f0000000200)) 00:51:40 executing program 5: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0xa, 0x0, &(0x7f0000000140)) 00:51:40 executing program 2: socket$kcm(0x29, 0x2, 0x0) select(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x8}, 0x0, &(0x7f0000000300)={0x77359400}) 00:51:40 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 00:51:40 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_matches\x00') 00:51:41 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:41 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x8, 0x0, &(0x7f0000000140)) 00:51:41 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000c00)=ANY=[], 0x28}}, 0x0) 00:51:41 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 00:51:41 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, 0x0) 00:51:41 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}, 0x2040) 00:51:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) 00:51:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x2c}}, 0x0) 00:51:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\v\x00\x00\x00\x00\x00\x00\x00\x00\x00Q'], 0x3c}}, 0x0) 00:51:41 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000240), 0x4) 00:51:41 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='gid_map\x00') write$vga_arbiter(r0, 0x0, 0x0) [ 302.338621][ T7783] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 00:51:42 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:42 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, 0x0) 00:51:42 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:42 executing program 2: clock_gettime(0x0, &(0x7f0000000380)={0x0}) select(0x40, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000003c0)={r0}) 00:51:42 executing program 5: select(0x19, &(0x7f0000000100)={0x100}, 0x0, 0x0, 0x0) 00:51:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:51:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000340)=ANY=[@ANYBLOB="01"]) [ 303.109685][ T25] audit: type=1400 audit(1647910302.313:337): avc: denied { ioctl } for pid=7788 comm="syz-executor.3" path="socket:[46334]" dev="sockfs" ino=46334 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 00:51:42 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x29, 0x0, 0x0) [ 303.229521][ T7802] sd 0:0:1:0: device reset 00:51:42 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0_macvtap\x00', {0x2, 0x0, @loopback}}) 00:51:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x80108906, 0x0) 00:51:42 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000400)={'team0\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) 00:51:43 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:43 executing program 3: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) select(0x40, &(0x7f0000000240), 0x0, &(0x7f0000000340)={0x6}, &(0x7f00000003c0)={0x0, r0/1000+10000}) 00:51:43 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4b47, 0x0) 00:51:43 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_tables_names\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 00:51:43 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8918, 0x0) 00:51:43 executing program 2: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x120) 00:51:43 executing program 5: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3}, &(0x7f0000000140)) 00:51:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x20, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 00:51:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8920, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:51:43 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000540), 0xc2181, 0x0) 00:51:43 executing program 0: select(0x40, &(0x7f0000000100)={0x300}, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) 00:51:44 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 00:51:44 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:44 executing program 2: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x88, 0x42, 0x0, 0x0) 00:51:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x40086602, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:51:44 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:44 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x3}]}, 0x1c}}, 0x0) 00:51:44 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000280)) 00:51:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = dup3(r0, r1, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000080)) [ 304.959351][ T25] audit: type=1400 audit(1647910304.163:338): avc: denied { setattr } for pid=7843 comm="syz-executor.3" path="socket:[46432]" dev="sockfs" ino=46432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 304.977332][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 00:51:44 executing program 3: socket$kcm(0x29, 0x2, 0x0) select(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x8}, &(0x7f0000000240)={0x3}, &(0x7f0000000300)={0x77359400}) 00:51:44 executing program 0: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x11, 0xa, 0x0, &(0x7f0000000140)) 00:51:44 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) [ 305.141596][ T25] audit: type=1400 audit(1647910304.333:339): avc: denied { getopt } for pid=7855 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 00:51:44 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891c, 0x0) 00:51:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0xfac78c16ba8b4b8f}, 0x14}}, 0x0) 00:51:44 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:44 executing program 0: add_key(&(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 00:51:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'macvtap0\x00'}) 00:51:45 executing program 3: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x11, 0x66, 0x0, &(0x7f0000000140)) 00:51:45 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a0, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 00:51:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 00:51:45 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 00:51:45 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:45 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000c40), &(0x7f0000000c80)=0x8) 00:51:45 executing program 5: syz_io_uring_setup(0x1dc4, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:51:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x5460, 0x0) 00:51:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8946, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:51:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000000000003d"], 0x4c}}, 0x0) [ 306.050309][ T25] audit: type=1400 audit(1647910305.253:340): avc: denied { getopt } for pid=7887 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 00:51:45 executing program 0: socketpair(0x22, 0x0, 0xffff, &(0x7f00000003c0)) 00:51:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000016c0)={&(0x7f0000000c40), 0xc, &(0x7f0000001680)={&(0x7f0000000cc0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0xc, 0x5, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}]}, 0x34}}, 0x0) 00:51:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000f0ff130002801400ff0000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x50}}, 0x0) 00:51:45 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89b1, &(0x7f0000000180)={'sit0\x00', 0x0}) [ 306.207162][ T7900] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 306.209714][ T7901] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 306.249479][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.269774][ T7904] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.2'. 00:51:46 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:46 executing program 3: socket$inet(0xa, 0x2, 0x0) 00:51:46 executing program 5: socket$kcm(0x29, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 00:51:46 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/nf_conntrack\x00') 00:51:46 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:46 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 00:51:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000300)=""/148, 0x94}], 0x1, 0x1f2, 0x0) 00:51:46 executing program 0: r0 = socket$inet(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000), 0x18) [ 306.864661][ T7913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 00:51:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x11, 0x42, 0x0, 0x0) 00:51:46 executing program 0: keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x3}) 00:51:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}}, 0x0) 00:51:46 executing program 5: unshare(0x4060400) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002d40)) 00:51:47 executing program 5: syz_io_uring_setup(0x5699, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 00:51:47 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:47 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) socket(0x0, 0x3, 0x9) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_tables_names\x00') 00:51:47 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:47 executing program 2: syz_open_dev$usbfs(&(0x7f00000001c0), 0x6eb9, 0x70940) 00:51:47 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891c, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 00:51:47 executing program 2: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x11, 0xb, 0x0, &(0x7f0000000140)) 00:51:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000005) 00:51:47 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:47 executing program 0: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x11, 0x64, 0x0, &(0x7f0000000140)) 00:51:47 executing program 3: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2, 0x0, 0x2000000000000000}) 00:51:47 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') 00:51:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x8932, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:51:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 00:51:47 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x8707}]) [ 308.238978][ T7968] loop2: detected capacity change from 0 to 135 00:51:47 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x541b, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:51:47 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) 00:51:47 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:47 executing program 2: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x1a, 0x0, &(0x7f0000000140)) 00:51:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f2, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:51:48 executing program 0: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x19, 0x0, &(0x7f0000000140)) 00:51:48 executing program 3: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2, 0x0, 0x2000000000000000}) 00:51:48 executing program 2: io_setup(0xe2b, &(0x7f0000000000)=0x0) io_destroy(r0) io_setup(0x2, &(0x7f0000000040)) 00:51:48 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890c, 0x0) 00:51:48 executing program 5: r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2, 0x0, 0x2000000000000000}) 00:51:48 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:48 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x50, r1, 0x401, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 00:51:48 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:48 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x1000, 0x4) [ 309.672899][ T25] audit: type=1400 audit(1647910308.873:341): avc: denied { setopt } for pid=8000 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 00:51:48 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8917, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 00:51:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_tables_names\x00') io_uring_setup(0x7cb7, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 00:51:49 executing program 5: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x11, 0x65, 0x0, &(0x7f0000000140)) 00:51:49 executing program 3: syz_io_uring_setup(0x20ef, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 00:51:49 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:51:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'veth0_macvtap\x00'}) 00:51:49 executing program 2: socketpair(0x23, 0x0, 0x5d, &(0x7f0000000040)) 00:51:49 executing program 5: socket$inet(0x2, 0xa, 0x0) socketpair(0x11, 0x2, 0x0, &(0x7f0000000000)) 00:51:49 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:51:49 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 00:51:49 executing program 0: select(0x40, &(0x7f0000000100)={0x300}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0xea60}) 00:51:49 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/nf_conntrack_expect\x00') 00:51:49 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(0xffffffffffffffff, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f5, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:51:49 executing program 2: io_uring_setup(0x39ad, &(0x7f0000000040)) 00:51:49 executing program 0: syz_read_part_table(0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="3f8860d016f28b8c79e83f4b", 0xc, 0x8707}, {&(0x7f0000000040)="68e004e0702c51c018d107c59c837fc7b6da96ddc391774906baad0e9e8d955cfab33c660498ea7523178b625d85ce803fc548c505852e12bcf11b19251e8cec79c76fa1a10882bdb9a223560624fcd37c04b0a3097303a64e70f14b09d3c2a6cad74d4209e73cf3a2a93c23e02153", 0x6f, 0x1}]) [ 310.667564][ T25] audit: type=1400 audit(1647910309.873:342): avc: denied { ioctl } for pid=8027 comm="syz-executor.3" path="socket:[48162]" dev="sockfs" ino=48162 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 00:51:49 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x4500, 0x0) 00:51:49 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 00:51:50 executing program 5: add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) 00:51:50 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) 00:51:50 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:51:50 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') 00:51:50 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udplite\x00') 00:51:50 executing program 0: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) select(0x40, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000003c0)={0x0, r0/1000+10000}) 00:51:50 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(0xffffffffffffffff, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x890c, 0x0) 00:51:50 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_tables_names\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_tables_names\x00') 00:51:50 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:50 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8902, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 00:51:50 executing program 0: add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) 00:51:50 executing program 5: select(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)) 00:51:50 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) 00:51:50 executing program 0: socketpair(0xa, 0x5, 0x5, &(0x7f0000000000)) 00:51:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='maps\x00') read(r0, &(0x7f0000000040)=""/95, 0x5f) 00:51:50 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000cc0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0x4}]}, 0x2c}}, 0x0) [ 311.874333][ T8084] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 00:51:51 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(0xffffffffffffffff, 0x90e, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:51 executing program 5: r0 = socket$inet(0xa, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ah\x00', 0x11}, &(0x7f0000000140)=0x1e) 00:51:51 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_tables_names\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 00:51:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/ip6_tables_names\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) 00:51:51 executing program 0: sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 00:51:51 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:51 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) 00:51:51 executing program 2: syz_open_dev$usbfs(&(0x7f00000001c0), 0x6eb9, 0x0) 00:51:51 executing program 5: add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "80ebfe9ecce6d6be0b5d51c640c10720b7480fd45f095c29c6ee4d870ed0daf1cc56d00b921150f6ddbf94129045f21bb78eb38dbd02a8bafd906cb553989eeb"}, 0x48, 0xfffffffffffffffe) 00:51:51 executing program 3: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 00:51:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000740)={[{@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) 00:51:51 executing program 2: setresuid(0x0, 0xee00, 0xee00) r0 = geteuid() setresuid(r0, 0x0, 0x0) 00:51:52 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:52 executing program 5: getrusage(0xcd1b0e84c1e8fb59, 0x0) 00:51:52 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:52 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "a991cc093414ec2b7c91ecc652a389ae74b7373aed4253d2e3d2dbc822d9c95eeede8600de1c6ac99e9bd9274a802d15e7b63b7f698cbe8c28087d7aab82ce6c"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:51:52 executing program 2: clock_adjtime(0x0, &(0x7f0000000200)={0x17d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x630e0a00}) 00:51:52 executing program 0: syz_emit_ethernet(0xf2, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x28, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@noop, @noop, @cipso={0x86, 0x42, 0x0, [{0x0, 0x12, "1f1fef84519477e6addfaed821ec681d"}, {0x0, 0xc, "5e3cb9aefe21ac8664da"}, {0x0, 0xe, "22b143d67ec9972260a0664c"}, {0x0, 0x3, "e3"}, {0x0, 0x6, "d1265648"}, {0x0, 0x7, "c9c72c775d"}]}, @timestamp={0x44, 0x4}, @ssrr={0x89, 0x7, 0x0, [@remote]}, @ssrr={0x89, 0xb, 0x0, [@broadcast, @multicast1]}, @timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ssrr={0x89, 0xf, 0x0, [@multicast2, @dev, @rand_addr]}]}}}}}}, 0x0) 00:51:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x20}, {0x2, 0x0, 0x0, 0x371}]}) 00:51:52 executing program 5: setresuid(0x0, 0xee00, 0xee00) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{}]}) 00:51:52 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0x3, r0, 0x0, 0x0, 0xfffffffffffffffb) 00:51:52 executing program 3: socket$alg(0x26, 0x5, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x9}, &(0x7f00000000c0)) 00:51:52 executing program 0: setresuid(0x0, 0xee01, 0xffffffffffffffff) 00:51:52 executing program 2: sched_setattr(0x0, &(0x7f0000000000)={0x20000038}, 0x0) 00:51:53 executing program 3: setresuid(0x0, 0xee00, 0xee00) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) 00:51:53 executing program 5: r0 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r0) 00:51:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(salsa20-generic,crc32))\x00'}, 0x58) 00:51:53 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:53 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:53 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RMKDIR(r0, &(0x7f0000000340)={0x14}, 0x14) 00:51:53 executing program 5: syz_emit_ethernet(0x2e, &(0x7f0000008b00)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 00:51:53 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x1) 00:51:53 executing program 3: r0 = msgget(0x0, 0x0) msgctl$IPC_RMID(r0, 0x2) 00:51:53 executing program 5: get_robust_list(0x0, 0x0, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:51:53 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "a991cc093414ec2b7c91ecc652a389ae74b7373aed4253d2e3d2dbc822d9c95eeede8600de1c6ac99e9bd9274a802d15e7b63b7f698cbe8c28087d7aab82ce6c"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xf, r0, 0x0, 0x0, 0x0) 00:51:53 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}], [{@dont_hash}]}) 00:51:53 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:53 executing program 3: socket$inet(0x2, 0x0, 0xfffffffb) [ 314.722957][ T8168] tmpfs: Unknown parameter 'dont_hash' 00:51:54 executing program 0: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x10001, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x3f, 0x0, 0x0, 0x0, &(0x7f0000001b40)={[{@size={'size', 0x3d, [0x25, 0x0]}}]}) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$search(0x4, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 00:51:54 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0xffffffc4}) 00:51:54 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:54 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a991cc093414ec2b7c91ecc652a389ae74b7373aed425352e3d2dbc822d9c95eeede8600de1c6ac99e9bd9274a802d15e7b63b7f698cbe8c28087d7aab82ce6c"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000005c0)='asymmetric\x00', &(0x7f0000000600)={'syz', 0x2}, 0x0) 00:51:54 executing program 5: setresuid(0x0, 0xee00, 0xee00) syslog(0x0, 0x0, 0x0) 00:51:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x0) 00:51:54 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 00:51:54 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:54 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040), 0x4) 00:51:54 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 00:51:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'team0\x00', 0x1}) 00:51:54 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='8-6:'], 0x5) 00:51:54 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'perf_event'}]}, 0xc) 00:51:54 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x88, 0xcd, 0x0, 0x0) 00:51:55 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:55 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x5603, &(0x7f0000000000)) 00:51:55 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='0-'], 0x5) 00:51:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000003e80)=@base={0x14, 0x0, 0x0, 0x0, 0x14}, 0x48) 00:51:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000001240)) 00:51:55 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='8,'], 0x5) 00:51:55 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)=""/4096, 0x151, 0x1000, 0x1}, 0x20) 00:51:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="9feb01001800000000000000300100003001000009000000010000000400000f01"], &(0x7f00000007c0)=""/4096, 0x151, 0x1000, 0x1}, 0x20) 00:51:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) 00:51:55 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {0x2d}, {}]}) 00:51:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)=""/4096, 0x151, 0x1000, 0x1}, 0x20) 00:51:55 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:55 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x5, 0x0, 0x0, 0x7300}, [@initr0]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:55 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 00:51:55 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:55 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 00:51:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000007b5ce49d0a2f851000000495c2a9f1400000050000000000004ad60000009500000000000000186800000d000000000000000001", @ANYRES32, @ANYBLOB="000000000200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:56 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)=""/4096, 0x151, 0x1000, 0x1}, 0x20) 00:51:56 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) 00:51:56 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) [ 316.769029][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.775383][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 00:51:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {0x3}]}) 00:51:56 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="9feb01001800000000000000300100003001000009000000010000000474000f"], &(0x7f00000007c0)=""/4096, 0x151, 0x1000, 0x1}, 0x20) 00:51:56 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) 00:51:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) 00:51:56 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 00:51:56 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip6_vti0\x00'}) 00:51:56 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 00:51:56 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {0x20}, {}]}) 00:51:56 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/144, 0x90}], 0x1) 00:51:56 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='0-'], 0x5) 00:51:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x94}]}) 00:51:56 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 00:51:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x800454e1, &(0x7f0000000080)={0x0, 0x0}) 00:51:56 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, 0x0, 0x0) 00:51:56 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xffffffffffffffb4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000056, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 00:51:56 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:51:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000140)={'syzkaller1\x00', 0xff01}) 00:51:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ipvlan0\x00', 0x1}) ioctl$TUNATTACHFILTER(r0, 0x400454cb, 0x0) 00:51:56 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@alu={0x4, 0x0, 0xb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:56 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, 0x0, 0x0) 00:51:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@initr0]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:56 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:51:56 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@initr0]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='objagg_obj_root_create\x00', r0}, 0x10) 00:51:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x16}]}) 00:51:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x15}, {}]}) 00:51:57 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:51:57 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, 0x0, 0x0) 00:51:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) 00:51:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='8-6\n6'], 0x5) 00:51:57 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680), 0x0) 00:51:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {0x45}, {}]}) 00:51:57 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:57 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 00:51:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ipvlan0\x00', 0x1}) close(r0) 00:51:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x45}]}) 00:51:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x10) 00:51:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)=""/4096, 0x151, 0x1000, 0x1}, 0x20) 00:51:57 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680), 0x0) 00:51:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x800454e0, &(0x7f0000000080)={0x0, 0x0}) 00:51:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@dev]}) 00:51:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)=""/4096, 0x151, 0x1000, 0x1}, 0x20) 00:51:57 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680), 0x0) 00:51:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc3040, 0x0) ioctl$TUNATTACHFILTER(r0, 0x5452, &(0x7f0000000080)={0x0, 0x0}) 00:51:57 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:57 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x8, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x800454e0, &(0x7f0000000080)={0x0, 0x0}) 00:51:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:57 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{0x0}], 0x1) 00:51:57 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='0\n6'], 0x5) 00:51:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ipvlan0\x00', 0x1}) close(r0) 00:51:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'veth1_vlan\x00', 0x8000}) 00:51:58 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x10) 00:51:58 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{0x0}], 0x1) 00:51:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)={0x0, 0x4, [@local, @local, @local, @multicast]}) 00:51:58 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 00:51:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x64}, {}]}) 00:51:58 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) 00:51:58 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='0,'], 0x5) 00:51:58 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_io_uring_setup(0x15b7, &(0x7f0000000340), &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{0x0}], 0x1) 00:51:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)={0x0, 0x4, [@local, @local, @local, @multicast]}) 00:51:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x800454d7, &(0x7f0000000080)={0x0, 0x0}) 00:51:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x22283, 0x0) close(r0) 00:51:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x6000000}, [@initr0]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) 00:51:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@alu={0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffffd4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x400454dc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) 00:51:58 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)=""/4096, 0x151, 0x1000, 0x1}, 0x20) 00:51:58 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)={0x0, 0x4, [@local, @local, @local, @multicast]}) 00:51:58 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x5) 00:51:58 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 00:51:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ipvlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 00:51:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x400454dc, &(0x7f0000000080)={0x0, 0x0}) 00:51:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x5, 0x0, 0x0, 0xffffffff}, [@initr0]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:51:58 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mkdir(&(0x7f0000001900)='./file0\x00', 0x0) 00:51:58 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)) 00:51:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000300)={0x0, 0x4, [@local, @local, @local, @multicast]}) 00:51:58 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:59 executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6) 00:51:59 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 00:51:59 executing program 0: r0 = socket(0x1, 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) 00:51:59 executing program 5: r0 = socket(0x1, 0x5, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x4c) 00:51:59 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003cc0), &(0x7f0000003d00)=0xc) 00:51:59 executing program 2: semget(0x1, 0x4, 0x80) 00:51:59 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$netlink(r0, 0x0, &(0x7f0000000100)) 00:51:59 executing program 5: r0 = socket(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) 00:51:59 executing program 0: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') setxattr$security_evm(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 00:51:59 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 00:51:59 executing program 5: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') removexattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)=@random={'os2.', '-+%:*\x00'}) 00:51:59 executing program 1: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:59 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0) 00:51:59 executing program 4: r0 = eventfd(0x10000) write$eventfd(r0, &(0x7f00000002c0)=0xfffffffffffffffd, 0x8) 00:51:59 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 00:51:59 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 00:51:59 executing program 0: setxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x4b350819bb3e7133) 00:51:59 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 00:51:59 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x103) 00:51:59 executing program 3: r0 = socket(0x1, 0x5, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x4000) 00:51:59 executing program 0: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) fchownat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0xee01, 0x0) 00:51:59 executing program 3: semget(0x0, 0x1, 0x5) 00:51:59 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 00:51:59 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:51:59 executing program 0: r0 = socket(0x1, 0x5, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000040)) 00:52:00 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={0x0, r0}, 0x10) 00:52:00 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001240)="f7", 0x1}], 0x1}, 0x0) 00:52:00 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:52:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000001000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@union={0x0, 0x7400}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000001080)=""/200, 0x2f, 0xc8, 0x1}, 0x20) 00:52:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:52:00 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 321.113703][ T25] audit: type=1400 audit(1647910320.328:343): avc: denied { read } for pid=8483 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 00:52:00 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 00:52:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000955d"], &(0x7f0000000080)='GPL\x00', 0x1, 0xdd, &(0x7f0000000300)=""/221, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:52:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@union={0x9}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000100)=""/200, 0x30, 0xc8, 0x1}, 0x20) 00:52:00 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 00:52:00 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) 00:52:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x1, &(0x7f00000000c0)=@raw=[@func], &(0x7f0000000140)='GPL\x00', 0x0, 0xe901, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 00:52:00 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 00:52:01 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x1, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffff}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 00:52:01 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:52:01 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b0000000900000000000005000000000000000000000000005f"], &(0x7f0000001080)=""/200, 0x2f, 0xc8, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r0, 0x20, &(0x7f0000000240)={&(0x7f00000004c0)=""/262, 0x106, 0x0, 0x0}}, 0x10) 00:52:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:52:01 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x3fe}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:52:01 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:52:01 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 00:52:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x1, 0xc8, &(0x7f00000001c0)=""/200, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:52:01 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b0000000900000000000005000000000000000000000000005f"], &(0x7f0000001080)=""/200, 0x2f, 0xc8, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10) 00:52:01 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:52:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:52:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xce, &(0x7f00000001c0)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x10) 00:52:01 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16}, 0x48) 00:52:01 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:52:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000540)="95", 0x1, 0x104, &(0x7f0000000180)={0x10, 0x2}, 0x10) 00:52:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x23, &(0x7f0000000000), 0x8c) 00:52:01 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:52:01 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r1, &(0x7f0000000240)="ca", 0x1, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) sendto(r1, 0x0, 0x0, 0x108, 0x0, 0x0) dup2(r0, r1) 00:52:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000000)=0x1f, 0x4) 00:52:01 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x48, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="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", 0x5a9}], 0x1}, 0x0) 00:52:01 executing program 4: r0 = socket(0x2, 0x1, 0x84) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x0, r0) connect$inet(r2, &(0x7f0000000000)={0x10}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x13, &(0x7f0000000040), 0x8) 00:52:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) 00:52:01 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x2e9, 0x0, 0x2, 0x0, 0x1}, 0x98) 00:52:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) sendto(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)=@un=@abs={0x8}, 0x8) 00:52:01 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r0, r1) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 00:52:01 executing program 0: sendmsg(0xffffffffffffff9c, &(0x7f0000001240)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[{0x5c, 0x0, 0x0, "8437c6ddb1dcc38a5c30890de5cce8d78c6f1127045488917b177374510e3ac7e02831a1a334f9af5629aa619bc212a62a0e605a4c3d508616c0c56721d3e1db79a698b9690b1f414d186d6d1c"}, {0xe8, 0x0, 0x0, "238f5ae94640b474e252df800b8f39c641827450eec3ba4b2fe0b5f531d760c392e7d1448b1e3aa709cd159c707d17372f93970b30fa717e440c848d89278b11bd076458456a25b45ce01de7fcd2e4764e1668fb23bca7e0779e335e08c00181b1e317b7d32677e5a3dcaecb7987afa186db8936390bad4af6e664649b4951045a46093361c955d46b1304f2b2ecbafd975858fb0dc64569bdf64175faa28e2993f5702e88ed3ca424cbdde47ec80305986aa4e30c107f7772abd43edc9ee005d25fda15899aaae8115f90e64d8a65dcd35f4aaa235e4dba49"}, {0x58, 0x0, 0x0, "f790320d04a75b9f8635dd67d9c275d919b0bfe31c38cd7bf941d86866d645244345d120aba54b7021f01928238348f2b383f9ce2a0d7c96a66fb399972653f762df603530778ffb08"}, {0x668, 0x0, 0x0, "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"}], 0x804}, 0x0) 00:52:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 00:52:01 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/63, 0x3f}, 0x81) 00:52:01 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:52:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x2e9, 0x0, 0x2}, 0x98) 00:52:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f0000000200)={0x10, 0x2}, 0x10) 00:52:02 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x88) 00:52:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="d7", 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x14, 0x84, 0x7, {0x2}}], 0x14}, 0x0) 00:52:02 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect(r0, &(0x7f0000000080)=@un=@file={0xa}, 0xa) 00:52:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000140), &(0x7f00000001c0)=0x8) 00:52:02 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000000080), 0xc) 00:52:02 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) 00:52:02 executing program 0: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) 00:52:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000500), &(0x7f0000000540)=0x4) 00:52:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000700)='w', 0x1, 0x198, &(0x7f0000000740)={0x10, 0x2}, 0x10) 00:52:02 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:52:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000580)="f0", 0x1}], 0x1, &(0x7f0000000180)=[@dstaddrv6={0x1c, 0x84, 0xa, @remote={0xfe, 0x80, '\x00', 0x0}}], 0x1c}, 0x0) 00:52:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000900)={0x19, 0x2}, 0x10) 00:52:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x800}}], 0x1c}, 0x0) 00:52:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x1000}}], 0x1c}, 0x0) 00:52:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000013c0), &(0x7f0000001480)=0x98) 00:52:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x10, 0x2}, 0x10) 00:52:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180), 0x88) 00:52:02 executing program 4: r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000012c0)={0x10, 0x2}, 0x10) 00:52:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000001c80)="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", 0x599}], 0x1, &(0x7f0000000580)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x1000}}], 0x1c}, 0x0) 00:52:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x198, &(0x7f0000000740)={0x10, 0x2}, 0x10) 00:52:02 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001540)=[{0xc}, {0xc}], 0x18}, 0x0) 00:52:02 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:52:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 00:52:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x800}}], 0x1c}, 0x0) 00:52:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet(0x2, 0x5, 0x0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000300)={0x1c, 0x1c}, 0x1c) r3 = dup2(r2, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000700)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000100)={r4}, 0x8) 00:52:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@prinfo={0x14, 0x84, 0x7, {0xf}}], 0x14}, 0x0) 00:52:02 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r0, r1) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 00:52:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) dup2(r0, r1) bind(r1, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) 00:52:02 executing program 4: utimensat(0xffffffffffffffff, &(0x7f0000003d80)='./file0\x00', &(0x7f0000003dc0), 0x0) 00:52:03 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 00:52:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000640)={0x1c, 0x1c}, 0x1c) dup2(r0, r1) 00:52:03 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}], 0x2, &(0x7f0000000a00)=""/27, 0x1b}, 0x82) 00:52:03 executing program 3: sendmsg(0xffffffffffffff9c, &(0x7f0000001240)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[{0x58, 0x0, 0x0, "8437c6ddb1dcc38a5c30890de5cce8d78c6f1127045488917b177374510e3ac7e02831a1a334f9af5629aa619bc212a62a0e605a4c3d508616c0c56721d3e1db79a698b9690b1f414d"}, {0xe8, 0x0, 0x0, "238f5ae94640b474e252df800b8f39c641827450eec3ba4b2fe0b5f531d760c392e7d1448b1e3aa709cd159c707d17372f93970b30fa717e440c848d89278b11bd076458456a25b45ce01de7fcd2e4764e1668fb23bca7e0779e335e08c00181b1e317b7d32677e5a3dcaecb7987afa186db8936390bad4af6e664649b4951045a46093361c955d46b1304f2b2ecbafd975858fb0dc64569bdf64175faa28e2993f5702e88ed3ca424cbdde47ec80305986aa4e30c107f7772abd43edc9ee005d25fda15899aaae8115f90e64d8a65dcd35f4aaa235e4dba49"}, {0x58, 0x0, 0x0, "f790320d04a75b9f8635dd67d9c275d919b0bfe31c38cd7bf941d86866d645244345d120aba54b7021f01928238348f2b383f9ce2a0d7c96a66fb399972653f762df603530778ffb08"}, {0x650, 0x0, 0x0, "b0bb74ffdc499425ba4a6509fb60a61a481c40d2b139a5bb5afce3b3f19f419be981dd3f7f9ead92f969e2044f1d39fa8e6bb059ede24fdad110ca3365ec709ddb3c50b20519c4c578a7df60c885da03872a51907c238aa351bf1dd013ab06262929481fafe4941610d0c6be26b9b866203e4ea4d256f6eb5a73788fb729cbe8e3b07bba0bd023e3944210f22d22cd57a150d9e4f76a727066f22f61c6820ff3ff688efbd14d9660b58956c35b5759085b6b28cb363a959c23d91562810ba5b1da1749e5a85d9f65269ee885c0ce159106567262754ba32dfcd0b5e348b0f9d4019c078c9c749182b993ac2a70cd427545fc985dfb32e8659e8ceec1907db5df811f14051abc34f718c7c0862061fb2a0cfdd3e26df9e54a86bcbb60ab5edaa8e32340cf2d9a80e66fcede369371aad1d4afc360b3d08d714d4598c3b9444f115b51fe972a316d6d15791a9848015cedb4126be34a1149be36f7ebebe5550f028e99e858f5d569f5c9061bfdedfba8d90ba0785f87aa0750bef14864f184c27967a1ef31bb8a291d623f16553e83a353988537574442092f91df39f65692be17a8a6aa1fed2acc3bc63a5d4365b934fbaefcffe654cc5a5ca51e464c05d052fb9685ff1e3c64c382d8c8fde13f65896eb5e0b0b38a8b69afe49e10935affaab3710c28d13c8bd43ed8e4e115732efe843add7067d74798f0d074dc2cbbd7254ea54bbecbb5a87edff6d19af368eb1c3b155f86eec78f964ea7d7aaddbeeeddf46ce4653ab8b21d289058dc6605f7cefb99fd4b6453758c3469689d09430f07504088495b8606c8ef51ae7ac93a494058649b0499f93f6dbb8702e0128853cc0ca92811482dde3604099c01e74c8c70571fce6b99929a90c3f1adb90c9c2f96915be9dff8fe353d01baa0f697822b7f50e417fadd130b64fb2d2d727b41ae207e90e8373d70080882d77040017c31954541f936264378ce1dfae30a71ee6ce05e25f61caecbe8e36b2d6bdd6d06be377239e529d17432501ef65158b50b0b4e6d1e319bbc84ad6ffef1f4913eb628574c034af01f3caffc3a300845a8978222fdedc8d841b46ea74d792637388414df80b9ce17f5054a44a2b90b331bff0e9df7535e452e4b67f4bcec8f5d6babd47fe34ade46db865ce01af8453b2517feccd098a18ae8d9e5f746c716930ed785844c4cd9e6448d6f6c667c406f0b46f029c27779a01e562e37868348880074837dd80a7d0a7e411228bdc0c4fcac462635547b5f9e98341380ff92d0e34c7d46006b411e4993c88ba68a465264b0dbd13cdaa1e2af250e81787a7448c5bb7d9e9cd491fbcc814eb9c63e79c35b25578b3324de2a522bfbac6d972316e1f76c9645ebfe9d55a359d339a15c75d0cef1c8379e132916e55c9e50b25d0ca69638ae5fe6f25588dffe8edd00dd2bebe7d0743ffff2ad6add4a09eac2758e4bab61cc7ed0faecaf2c0e0fca4c6cc0733d08d6107606b8ed535ac9cd1d6ab7ec7380897c52d80312cfb9b417d95bfc23b86b5687f1f073b083675b9ab8feda5bae54158306ad0808612f71d5c8baa4424ee5fcd32a970ba49bec0c4f62371633d7f6622b3e21fd6768aeec7cde5e2e2547ee5177eabc70b7c3315f3bb8159d2b01a41421ce51c7c3f20ec047ea672fd9275c849741f38a7ad09a907bf739c11b9ef91c29a076a67ca9657c3d007c545a4d0f49ab46fca244f95f85becfdb7baaa7b2c7e352f249c4e5c68b6f5f44dc237d270327a0d4de9653d996d4f342520c52fa71191cb60e062af1c0997edfd088e845582defce2993f8e70610b4701d2c681966b981f929d4ae561926e5a67fff3a17422ba3c7169b7b15f27af8b8492d79fb4048495b308a6186aae7c36ec26cf77fcef69b8373bf977d29b209ceec3ad9e1c2a28a3ce093ec326396cac14482f231761270ce864abccfd7be4eeef2dcc662c57d8df9ae00aae531ae086d6b3132e5935a7e9c662cb3cfa3a9696ebb9ad01b6e35c2c8034c3e1f117a33fe51c2420070e4ba6fdbb09cd705070f00fa3eb0ace0d1e41bdacf074006f7f737a8cc618e22dea11917c4d3d79c02c0480555ced18c21b5c30721860b88427e94d827f0cde71b5fb191e2f8f8468b02302829a1c4286e69bf1e715edf80211b46a603e824364cbbff663314ab693b0ec6a48c0586e22cbeeb9aabe1b2ae458a77cc4383f44d8a98ac4b55cf5bc4b049fc87776bd15d2d29411cbaf54e4f94d76d88181f4233de5c73"}], 0x7e8}, 0x0) 00:52:03 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e20, @local}, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:52:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x1000}}], 0x1c}, 0x0) 00:52:03 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 00:52:03 executing program 3: linkat(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1000) 00:52:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in={0x0, 0x2}, 0x69, 0x0, 0x0, &(0x7f0000000500)=[@prinfo={0x14}], 0x14}, 0x0) 00:52:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000680)="ce", 0x1, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 00:52:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000180), &(0x7f0000000000)=0x98) 00:52:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x21, &(0x7f0000000140)={0x401}, 0x10) 00:52:03 executing program 2: clock_adjtime(0x0, &(0x7f0000000000)={0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x664015e}) 00:52:03 executing program 4: io_setup(0x20, &(0x7f0000000000)=0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}]) 00:52:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x13}) 00:52:03 executing program 5: r0 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0)