00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x1000}}, 0x1006) (async) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x9) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) signalfd4(r1, &(0x7f0000000080)={[0x3800000000000]}, 0x8, 0x80c00) (async) sendfile(r4, r0, 0x0, 0x7f) (async) ioctl$VT_RELDISP(r3, 0x5605) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x4002, 0x0) (async) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000003c0)={0x0, 0x0, 0xce94, 0x7, 0x81, "a8044d357136389cbea41e250ce09e355b088e", 0xfff, 0x1}) (async) sendfile(r1, r5, &(0x7f00000001c0), 0xa080ffffff80) (async) [ 506.735777][ T26] audit: type=1400 audit(1644461237.448:875): avc: denied { read } for pid=14845 comm="syz-executor.0" path="socket:[71702]" dev="sockfs" ino=71702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 02:47:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) (async) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x29d9, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x62) (rerun: 64) io_uring_enter(r1, 0x2c, 0x7, 0x1, 0x0, 0xcc48) 02:47:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) (async) r6 = fcntl$dupfd(r0, 0x406, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000160f000000000000", @ANYRES32, @ANYBLOB="9b0b0000000000002e2f66696c653000"]) [ 506.791238][T14854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14854 comm=syz-executor.5 [ 506.826952][T14857] loop2: detected capacity change from 0 to 512 [ 506.911365][T14857] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 507.012018][T14857] loop2: detected capacity change from 0 to 512 [ 507.174230][ T7346] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 02:47:18 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 02:47:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x9000000) 02:47:18 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="2830053c6e398bc8b645a901f81f8b58c9a79d32e123969976bc80940abe5fe35902", @ANYRES64=0x0, @ANYRES64=0x0]) chdir(&(0x7f0000000140)='./file0\x00') (async) openat(r0, &(0x7f00000000c0)='./bus\x00', 0x4801, 0x8) (async) mount$fuse(0x0, &(0x7f0000000180)='./bus/../file0\x00', &(0x7f0000000240), 0x31c064, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f5e6d6f64653d30ed3030303030303030303030303030303036303030302c757365005f69dbc88538aa4cf0f30e643d", @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',default_permissions,obj_user=#,.@\'--$($$,\x00']) (async) r1 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x1000}}, 0x1006) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x9) (async) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = signalfd4(r1, &(0x7f0000000080)={[0x3800000000000]}, 0x8, 0x80c00) sendfile(r4, r0, 0x0, 0x7f) (async) ioctl$VT_RELDISP(r3, 0x5605) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x4002, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000003c0)={0x0, 0x0, 0xce94, 0x7, 0x81, "a8044d357136389cbea41e250ce09e355b088e", 0xfff, 0x1}) (async) sendfile(r1, r5, &(0x7f00000001c0), 0xa080ffffff80) [ 507.315041][T14814] Mem-Info: [ 507.318282][T14814] active_anon:677 inactive_anon:154556 isolated_anon:0 [ 507.318282][T14814] active_file:6412 inactive_file:7356 isolated_file:0 [ 507.318282][T14814] unevictable:768 dirty:42 writeback:0 [ 507.318282][T14814] slab_reclaimable:18257 slab_unreclaimable:129213 [ 507.318282][T14814] mapped:28063 shmem:2268 pagetables:767 bounce:0 [ 507.318282][T14814] kernel_misc_reclaimable:0 [ 507.318282][T14814] free:1280871 free_pcp:10212 free_cma:0 [ 507.398903][T14879] loop2: detected capacity change from 0 to 512 [ 507.406963][T14878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14878 comm=syz-executor.5 [ 507.436922][T14878] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 507.465540][T14814] Node 0 active_anon:2700kB inactive_anon:621468kB active_file:25572kB inactive_file:29424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112252kB dirty:168kB writeback:0kB shmem:6596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 542720kB writeback_tmp:0kB kernel_stack:10500kB pagetables:3160kB all_unreclaimable? no [ 507.479181][T14879] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 507.515965][ T7344] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 507.619532][T14814] Node 1 active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 507.676089][T14887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14887 comm=syz-executor.5 [ 507.715654][T14814] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 507.855134][T14814] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 507.861039][T14814] Node 0 DMA32 free:1162224kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2708kB inactive_anon:617312kB active_file:25496kB inactive_file:29480kB unevictable:1536kB writepending:132kB present:3129332kB managed:2716692kB mlocked:0kB bounce:0kB free_pcp:40196kB local_pcp:19616kB free_cma:0kB [ 507.955017][T14814] lowmem_reserve[]: 0 0 0 0 0 [ 507.959818][T14814] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.014989][T14814] lowmem_reserve[]: 0 0 0 0 0 [ 508.019743][T14814] Node 1 Normal free:3948252kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 508.095040][T14814] lowmem_reserve[]: 0 0 0 0 0 [ 508.107531][T14814] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 508.135146][T14814] Node 0 DMA32: 2478*4kB (ME) 2637*8kB (UME) 1483*16kB (UME) 825*32kB (ME) 422*64kB (UME) 151*128kB (UME) 48*256kB (UME) 27*512kB (UME) 13*1024kB (ME) 6*2048kB (UME) 240*4096kB (UM) = 1162224kB [ 508.175008][T14814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 508.201856][T14814] Node 1 Normal: 45*4kB (UME) 199*8kB (UME) 137*16kB (UME) 83*32kB (UM) 50*64kB (U) 43*128kB (UME) 11*256kB (UE) 6*512kB (UE) 1*1024kB (U) 3*2048kB (UM) 957*4096kB (M) = 3948252kB [ 508.220393][T14814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.234169][T14814] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 508.245744][T14814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.255686][T14814] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 508.265842][T14814] 16031 total pagecache pages [ 508.270539][T14814] 0 pages in swap cache [ 508.274686][T14814] Swap cache stats: add 0, delete 0, find 0/0 [ 508.281389][T14814] Free swap = 0kB 02:47:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fc, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x3bd0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fc, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) dup3(r1, r0, 0x0) 02:47:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x29d9, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x62) io_uring_enter(r1, 0x2c, 0x7, 0x1, 0x0, 0xcc48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) (async) syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x29d9, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x62) (async) io_uring_enter(r1, 0x2c, 0x7, 0x1, 0x0, 0xcc48) (async) 02:47:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = fcntl$dupfd(r0, 0x406, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000160f000000000000", @ANYRES32, @ANYBLOB="9b0b0000000000002e2f66696c653000"]) 02:47:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) 02:47:19 executing program 2: getpid() ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) io_getevents(0x0, 0x8, 0x0, 0x0, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone3(&(0x7f00000003c0)={0x200000000, 0x0, 0x0, 0x0, {0x31}, &(0x7f0000000840)=""/39, 0x27, 0x0, 0x0}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) r3 = dup(0xffffffffffffffff) syz_clone3(&(0x7f00000002c0)={0x41021880, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x18}, &(0x7f00000000c0)=""/153, 0x99, &(0x7f0000000180)=""/94, &(0x7f0000000280)=[r0, r0, r1, r2, r0], 0x5, {r3}}, 0x58) 02:47:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xa000000) [ 508.285916][T14814] Total swap = 0kB [ 508.289643][T14814] 2097051 pages RAM [ 508.293444][T14814] 0 pages HighMem/MovableOnly [ 508.298655][T14814] 384533 pages reserved [ 508.302810][T14814] 0 pages cma reserved 02:47:19 executing program 2: getpid() (async) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) (async) io_getevents(0x0, 0x8, 0x0, 0x0, 0x0) (async) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone3(&(0x7f00000003c0)={0x200000000, 0x0, 0x0, 0x0, {0x31}, &(0x7f0000000840)=""/39, 0x27, 0x0, 0x0}, 0x58) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) (async) r3 = dup(0xffffffffffffffff) syz_clone3(&(0x7f00000002c0)={0x41021880, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x18}, &(0x7f00000000c0)=""/153, 0x99, &(0x7f0000000180)=""/94, &(0x7f0000000280)=[r0, r0, r1, r2, r0], 0x5, {r3}}, 0x58) 02:47:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) [ 508.375362][T14894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14894 comm=syz-executor.5 [ 508.423328][T14900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fc, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) (async, rerun: 64) listen(r0, 0x3bd0) (async, rerun: 64) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fc, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) (async, rerun: 64) dup3(r1, r0, 0x0) (rerun: 64) [ 508.471449][ T26] audit: type=1400 audit(1644461239.188:876): avc: denied { write } for pid=14899 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 02:47:19 executing program 2: getpid() ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) io_getevents(0x0, 0x8, 0x0, 0x0, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone3(&(0x7f00000003c0)={0x200000000, 0x0, 0x0, 0x0, {0x31}, &(0x7f0000000840)=""/39, 0x27, 0x0, 0x0}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) r3 = dup(0xffffffffffffffff) syz_clone3(&(0x7f00000002c0)={0x41021880, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x18}, &(0x7f00000000c0)=""/153, 0x99, &(0x7f0000000180)=""/94, &(0x7f0000000280)=[r0, r0, r1, r2, r0], 0x5, {r3}}, 0x58) getpid() (async) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) (async) io_getevents(0x0, 0x8, 0x0, 0x0, 0x0) (async) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f00000003c0)={0x200000000, 0x0, 0x0, 0x0, {0x31}, &(0x7f0000000840)=""/39, 0x27, 0x0, 0x0}, 0x58) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)) (async) dup(0xffffffffffffffff) (async) syz_clone3(&(0x7f00000002c0)={0x41021880, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x18}, &(0x7f00000000c0)=""/153, 0x99, &(0x7f0000000180)=""/94, &(0x7f0000000280)=[r0, r0, r1, r2, r0], 0x5, {r3}}, 0x58) (async) 02:47:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fc, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x3bd0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fc, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) dup3(r1, r0, 0x0) 02:47:19 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1600}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@audit}]}}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000380)={0xffffffffffffff41, 0x0, 0x0, {{0x2, 0x2, 0xc8cf, 0x1f, 0x7, 0x9, 0x80, 0x5}}}, 0x60) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="666400000000fc478449caa9e3224e116f45b710d1", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="01040000a8ed51728074d3fc4362e35c", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$cgroup_int(r4, &(0x7f0000000440)=0x1b87, 0x12) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000140)=r3) [ 508.549126][ T26] audit: type=1804 audit(1644461239.268:877): pid=14897 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/689/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 [ 508.703195][T14928] fuse: Bad value for 'fd' [ 508.714411][ T26] audit: type=1400 audit(1644461239.428:878): avc: denied { listen } for pid=14921 comm="syz-executor.3" lport=33207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 02:47:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x141601, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)={0x0, 0xfffffffc, 0xffffff93, 0x0, 0x0, "0000160000edff8efc650e5b8bece30e00"}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xfb) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$TCFLSH(r4, 0x8925, 0x20000000) 02:47:19 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x10000, &(0x7f0000000180)={0x77359400}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) [ 508.762880][T14894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14894 comm=syz-executor.5 [ 508.916537][T14941] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 02:47:19 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1600}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@audit}]}}) (async) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000380)={0xffffffffffffff41, 0x0, 0x0, {{0x2, 0x2, 0xc8cf, 0x1f, 0x7, 0x9, 0x80, 0x5}}}, 0x60) (async, rerun: 64) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="666400000000fc478449caa9e3224e116f45b710d1", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="01040000a8ed51728074d3fc4362e35c", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$cgroup_int(r4, &(0x7f0000000440)=0x1b87, 0x12) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000140)=r3) 02:47:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = fcntl$dupfd(r0, 0x406, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000160f000000000000", @ANYRES32, @ANYBLOB="9b0b0000000000002e2f66696c653000"]) 02:47:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xc000000) 02:47:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fc, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x3bd0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fc, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) dup3(r1, r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) (async) listen(r0, 0x0) (async) socket$inet(0x2, 0x6, 0x0) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fc, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) (async) listen(r0, 0x3bd0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fc, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) (async) dup3(r1, r0, 0x0) (async) 02:47:19 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x10000, &(0x7f0000000180)={0x77359400}) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 02:47:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x141601, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)={0x0, 0xfffffffc, 0xffffff93, 0x0, 0x0, "0000160000edff8efc650e5b8bece30e00"}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xfb) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$TCFLSH(r4, 0x8925, 0x20000000) [ 509.125811][T14946] fuse: Bad value for 'fd' 02:47:19 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x10000, &(0x7f0000000180)={0x77359400}) (async, rerun: 64) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) [ 509.147149][T14950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14950 comm=syz-executor.5 [ 509.156473][T14955] fuse: Bad value for 'fd' 02:47:19 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1600}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@audit}]}}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000380)={0xffffffffffffff41, 0x0, 0x0, {{0x2, 0x2, 0xc8cf, 0x1f, 0x7, 0x9, 0x80, 0x5}}}, 0x60) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="666400000000fc478449caa9e3224e116f45b710d1", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="01040000a8ed51728074d3fc4362e35c", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$cgroup_int(r4, &(0x7f0000000440)=0x1b87, 0x12) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000140)=r3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) (async) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1600}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@audit}]}}) (async) creat(&(0x7f0000000080)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) write$FUSE_STATFS(r2, &(0x7f0000000380)={0xffffffffffffff41, 0x0, 0x0, {{0x2, 0x2, 0xc8cf, 0x1f, 0x7, 0x9, 0x80, 0x5}}}, 0x60) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="666400000000fc478449caa9e3224e116f45b710d1", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="01040000a8ed51728074d3fc4362e35c", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) write$cgroup_int(r4, &(0x7f0000000440)=0x1b87, 0x12) (async) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000140)=r3) (async) [ 509.257377][T14967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x141601, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)={0x0, 0xfffffffc, 0xffffff93, 0x0, 0x0, "0000160000edff8efc650e5b8bece30e00"}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xfb) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$TCFLSH(r4, 0x8925, 0x20000000) 02:47:20 executing program 3: ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x7, 0x0, 0x7f, 0x5, 0x1c, 0x2f, 0x80, 0xce, 0x7, 0x2, 0x9, 0x80, 0x80000001}, {0x4, 0x5, 0x80, 0x0, 0x1f, 0x8, 0x96, 0x71, 0x3, 0x9, 0x1, 0x40, 0x695}, {0x6, 0x400, 0x1f, 0x7, 0xae, 0x5, 0x2, 0x20, 0x5, 0x81, 0x20, 0x6, 0x3}]}) syz_mount_image$btrfs(&(0x7f0000000800), &(0x7f0000001080)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="9ff85171bbe924e41246e68ab1d6d00cd87f02b427e6f0bbaf46809692f9ea548e2f427ab60a45b28f46de9e9441bba5000001874f93404db8e53cfd23bffefe032bc4d92e52939532606f571524ed6c6d043d948de1a09f8b7e07c6a947adaff49aca0fddd013caed715bc507367088c0c7e2459e021f436c8f6da71224979518eaa2686f5919eb834efa539a26a100515c0e34fda655522267ee4e835f70025543d833b15016", 0xa7, 0x5}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73706163655f63616368652c636c0180000000000000652c636f6d707265732d666f7263652c666c5573686f6e636f6d6d69742c6e6f61636c2c667261676d656e743d646174612c00"]) [ 509.351492][T14972] fuse: Bad value for 'fd' [ 509.436574][T14980] fuse: Bad value for 'fd' 02:47:20 executing program 3: ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x7, 0x0, 0x7f, 0x5, 0x1c, 0x2f, 0x80, 0xce, 0x7, 0x2, 0x9, 0x80, 0x80000001}, {0x4, 0x5, 0x80, 0x0, 0x1f, 0x8, 0x96, 0x71, 0x3, 0x9, 0x1, 0x40, 0x695}, {0x6, 0x400, 0x1f, 0x7, 0xae, 0x5, 0x2, 0x20, 0x5, 0x81, 0x20, 0x6, 0x3}]}) (async) syz_mount_image$btrfs(&(0x7f0000000800), &(0x7f0000001080)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="9ff85171bbe924e41246e68ab1d6d00cd87f02b427e6f0bbaf46809692f9ea548e2f427ab60a45b28f46de9e9441bba5000001874f93404db8e53cfd23bffefe032bc4d92e52939532606f571524ed6c6d043d948de1a09f8b7e07c6a947adaff49aca0fddd013caed715bc507367088c0c7e2459e021f436c8f6da71224979518eaa2686f5919eb834efa539a26a100515c0e34fda655522267ee4e835f70025543d833b15016", 0xa7, 0x5}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73706163655f63616368652c636c0180000000000000652c636f6d707265732d666f7263652c666c5573686f6e636f6d6d69742c6e6f61636c2c667261676d656e743d646174612c00"]) 02:47:20 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1c9842, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'veth0_vlan\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20040084, &(0x7f0000000200)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r4, r2, 0x0, 0x800100020016) creat(&(0x7f0000000040)='./bus\x00', 0x0) 02:47:20 executing program 0: getpgid(0xffffffffffffffff) syz_clone(0xa0158500, 0x0, 0x0, 0x0, 0x0, 0x0) [ 509.569175][T14950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14950 comm=syz-executor.5 [ 509.621440][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 509.621456][ T26] audit: type=1804 audit(1644461240.338:884): pid=14993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1144062135/syzkaller.9Fibzk/652/bus" dev="sda1" ino=1185 res=1 errno=0 [ 509.758766][ T26] audit: type=1804 audit(1644461240.478:885): pid=14997 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1144062135/syzkaller.9Fibzk/652/bus" dev="sda1" ino=1185 res=1 errno=0 02:47:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r6 = fcntl$dupfd(r0, 0x406, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000160f000000000000", @ANYRES32, @ANYBLOB="9b0b0000000000002e2f66696c653000"]) 02:47:20 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000073b6f010cd0ca31053f4000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x20, 0x0, 0x7, "5c3faf18cc6256"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x40}, 0x0, &(0x7f0000000000)={0x20, 0x1, 0x2b, "6e418abc261adf8791c1f3c41eb206f3910d1e32c37c89be3f3230193a842c25277116fb1ee4024ec38cd6"}, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x5, 0x63, {0x63, 0x3, "565fa7d0bf63091eb50725eb8ac97f945dbe3450dbce4090e557cb5f86d7488fb6176738055392c5814ee6c1270c7591cb681396bba6674a2df1f835fdd2d83af771fe9778b5e0e15abeba18bc85a5a1a748d2907b9a8196da74aab927fef14e3d"}}, &(0x7f00000007c0)=ANY=[@ANYBLOB="000304000000040300008a1996747902531bc213ebf75000fdcb69d366ab1dd8f2da237f53e0009d95d4185240b3ffb924b0c292a74cef949098145f1c331ed7db55cde52980a9c203c2c861bbe4072fc38262a5669e8658ec3aa2afece6aa904908378a13380429d6390433d2e9efe9b1b15b7b684f2789259160e5793e62150654e533e9b23eededbee5bc818c8ba10ed82dc3962b257090d1ebb2b848a567d58d664a27"], &(0x7f0000000140)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x28, 0x4, 0x8, 0x3ff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x7, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "994b10e2d684b2305fe549b3bad044be"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x0, 0x7, 0x6, "bcf726bb", "72b2513a"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x46, 0x3, 0x7, 0x1, 0x0, 0x4, 0xfffd}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0x1, 0x1f, "1d1b9e30925ce74b017cb98aa97de1226fb495037430dcd81a45a0cffb7ca4"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x200}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x2af}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000480)={0x40, 0xb, 0x2, "3f80"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="c7d66cc88449"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="9c5f492f07ad"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "1ef8"}, &(0x7f0000000600)={0x40, 0x1a, 0x2}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x40, 0x4, 0xe8, {0xe8, 0x5, "4e266e266d4d7c0e6fcd1caaf3552da476d4f4e82eacf94335d5c73ac0b13956716b57b1c08366f7355304beb2f112c7bca6531ce791869f966b7eb55a91ff8d3de59bebc6f33239838c17cb8c96699fa37a38a344a333be043b51f0edc8549090511346dc025f9cc04c2ad9ef6ac630c3ccbaa4da47e1911bca50e37d53a663fec6e6fd683dc486e9b9f714659551b31435e061940cc02af9a4359f32240ecca34a205d554569a8f16a87f119788ba0b7f7fcc7463f3b4b3a51293987dabfa127454a7f5a15e2f3e4a069b7c70a36ab3edbd8459d2f51b52082137224889c615a3fcdaa0ac8"}}, &(0x7f0000000100)={0x0, 0x3, 0x29, @string={0x29, 0x3, "8dbdb96261dc36633c04a4f8feb106d54cd8544eaaafd3131ade7bbafef769fb7a99c018c323d0"}}, &(0x7f0000000980)={0x0, 0xf, 0xb0, {0x5, 0xf, 0xb0, 0x4, [@generic={0x93, 0x10, 0x3, "e99b3fefee1ea202d388a720c9ea8e59647dbc76ff9713ae31ad47d2ca422ffb8d6c39d2f2db14445c26112a2bbaabd8e21b8566414c9763c132bbb7839d03d2779a33c9e8d281e6ac3a9b99dcfc216b7207ba173abe0efeefe8d4ef127ef539a7665fd1431865412ff3dd550b1e1d6ba6913e9eb4fec3b1663ca36fa4c1abd138e4e931b3b1cbd37ae64d7324b3c9e5"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0xa, 0xdbd0}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x9, 0x4, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x8, 0x7}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x64, 0x2, 0x3f, "8b69d40e", "f7e70671"}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x1, 0x9, 0xfe, 0x3, 0x383, 0x43c}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)={0x20, 0xd, 0x81, "9f47f627a43ea99ddcbab092a57ed16fa337e21cac5e2b829170ce8155e00943163ca72bb92e1c7797344cd2b59274c18ad377fda61f7b834fe989a4997626fcbc8c3768a1838cabec550f77aea551ae76a3b7aeb5555cabcf7eb7bcd15122e9f1a23548852f65d8041ed505d73a16eaa34e92ff42903f230e7d9ac2e590eb8295"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x88}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x0, 0x40}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000d00)={0x40, 0x9, 0x1}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "cd52"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "d2f5"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x4e}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x7}}) 02:47:20 executing program 3: ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x7, 0x0, 0x7f, 0x5, 0x1c, 0x2f, 0x80, 0xce, 0x7, 0x2, 0x9, 0x80, 0x80000001}, {0x4, 0x5, 0x80, 0x0, 0x1f, 0x8, 0x96, 0x71, 0x3, 0x9, 0x1, 0x40, 0x695}, {0x6, 0x400, 0x1f, 0x7, 0xae, 0x5, 0x2, 0x20, 0x5, 0x81, 0x20, 0x6, 0x3}]}) syz_mount_image$btrfs(&(0x7f0000000800), &(0x7f0000001080)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="9ff85171bbe924e41246e68ab1d6d00cd87f02b427e6f0bbaf46809692f9ea548e2f427ab60a45b28f46de9e9441bba5000001874f93404db8e53cfd23bffefe032bc4d92e52939532606f571524ed6c6d043d948de1a09f8b7e07c6a947adaff49aca0fddd013caed715bc507367088c0c7e2459e021f436c8f6da71224979518eaa2686f5919eb834efa539a26a100515c0e34fda655522267ee4e835f70025543d833b15016", 0xa7, 0x5}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73706163655f63616368652c636c0180000000000000652c636f6d707265732d666f7263652c666c5573686f6e636f6d6d69742c6e6f61636c2c667261676d656e743d646174612c00"]) 02:47:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe000000) 02:47:20 executing program 0: getpgid(0xffffffffffffffff) syz_clone(0xa0158500, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) (async) syz_clone(0xa0158500, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 02:47:20 executing program 0: getpgid(0xffffffffffffffff) syz_clone(0xa0158500, 0x0, 0x0, 0x0, 0x0, 0x0) [ 509.929356][ T26] audit: type=1400 audit(1644461240.648:886): avc: denied { read write } for pid=15000 comm="syz-executor.4" name="raw-gadget" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 509.967177][T15006] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 510.032130][ T26] audit: type=1400 audit(1644461240.648:887): avc: denied { open } for pid=15000 comm="syz-executor.4" path="/dev/raw-gadget" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 02:47:20 executing program 3: timer_create(0x616e3e9fb2a61e3a, 0x0, &(0x7f00000004c0)) [ 510.082377][ T26] audit: type=1400 audit(1644461240.648:888): avc: denied { ioctl } for pid=15000 comm="syz-executor.4" path="/dev/raw-gadget" dev="devtmpfs" ino=730 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 02:47:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe020000) 02:47:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f00000002c0)) [ 510.176350][ T26] audit: type=1804 audit(1644461240.898:889): pid=15008 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/691/cgroup.controllers" dev="sda1" ino=1186 res=1 errno=0 [ 510.205399][T11676] usb 5-1: new high-speed USB device number 5 using dummy_hcd 02:47:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}, 0x8000) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002380)="dc", 0x1}], 0x1}, 0x0) [ 510.241461][T15017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:21 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1c9842, 0x0) (rerun: 64) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async, rerun: 64) listen(r3, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'veth0_vlan\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20040084, &(0x7f0000000200)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r4, r2, 0x0, 0x800100020016) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) 02:47:21 executing program 0: add_key(&(0x7f0000000080)='keyring\x00', 0x0, &(0x7f00000000c0), 0xfe03, 0x0) [ 510.455066][T11676] usb 5-1: Using ep0 maxpacket: 16 02:47:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) fcntl$dupfd(r0, 0x406, r2) [ 510.575426][T11676] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53 [ 510.591772][ T26] audit: type=1804 audit(1644461241.308:890): pid=15027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1144062135/syzkaller.9Fibzk/653/bus" dev="sda1" ino=1168 res=1 errno=0 [ 510.597404][T11676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.640497][ T26] audit: type=1804 audit(1644461241.358:891): pid=15029 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/692/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 510.646948][T11676] usb 5-1: config 0 descriptor?? [ 510.692646][ T26] audit: type=1804 audit(1644461241.408:892): pid=15031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1144062135/syzkaller.9Fibzk/653/bus" dev="sda1" ino=1168 res=1 errno=0 [ 510.955122][T11676] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 511.165606][T15003] UDC core: couldn't find an available UDC or it's busy: -16 [ 511.172992][T15003] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 511.405164][T11676] usb write operation failed. (-71) [ 511.426516][T11676] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 511.439073][T11676] dvbdev: DVB: registering new adapter (Terratec H7) [ 511.447869][T11676] usb 5-1: media controller created [ 511.465408][T11676] usb read operation failed. (-71) [ 511.485918][T11676] usb write operation failed. (-71) [ 511.494883][T11676] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 511.507586][T11676] usb 5-1: USB disconnect, device number 5 02:47:22 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000073b6f010cd0ca31053f4000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x20, 0x0, 0x7, "5c3faf18cc6256"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x40}, 0x0, &(0x7f0000000000)={0x20, 0x1, 0x2b, "6e418abc261adf8791c1f3c41eb206f3910d1e32c37c89be3f3230193a842c25277116fb1ee4024ec38cd6"}, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x5, 0x63, {0x63, 0x3, "565fa7d0bf63091eb50725eb8ac97f945dbe3450dbce4090e557cb5f86d7488fb6176738055392c5814ee6c1270c7591cb681396bba6674a2df1f835fdd2d83af771fe9778b5e0e15abeba18bc85a5a1a748d2907b9a8196da74aab927fef14e3d"}}, &(0x7f00000007c0)=ANY=[@ANYBLOB="000304000000040300008a1996747902531bc213ebf75000fdcb69d366ab1dd8f2da237f53e0009d95d4185240b3ffb924b0c292a74cef949098145f1c331ed7db55cde52980a9c203c2c861bbe4072fc38262a5669e8658ec3aa2afece6aa904908378a13380429d6390433d2e9efe9b1b15b7b684f2789259160e5793e62150654e533e9b23eededbee5bc818c8ba10ed82dc3962b257090d1ebb2b848a567d58d664a27"], &(0x7f0000000140)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x28, 0x4, 0x8, 0x3ff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x7, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "994b10e2d684b2305fe549b3bad044be"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x0, 0x7, 0x6, "bcf726bb", "72b2513a"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x46, 0x3, 0x7, 0x1, 0x0, 0x4, 0xfffd}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0x1, 0x1f, "1d1b9e30925ce74b017cb98aa97de1226fb495037430dcd81a45a0cffb7ca4"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x200}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x2af}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000480)={0x40, 0xb, 0x2, "3f80"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="c7d66cc88449"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="9c5f492f07ad"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "1ef8"}, &(0x7f0000000600)={0x40, 0x1a, 0x2}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x40, 0x4, 0xe8, {0xe8, 0x5, "4e266e266d4d7c0e6fcd1caaf3552da476d4f4e82eacf94335d5c73ac0b13956716b57b1c08366f7355304beb2f112c7bca6531ce791869f966b7eb55a91ff8d3de59bebc6f33239838c17cb8c96699fa37a38a344a333be043b51f0edc8549090511346dc025f9cc04c2ad9ef6ac630c3ccbaa4da47e1911bca50e37d53a663fec6e6fd683dc486e9b9f714659551b31435e061940cc02af9a4359f32240ecca34a205d554569a8f16a87f119788ba0b7f7fcc7463f3b4b3a51293987dabfa127454a7f5a15e2f3e4a069b7c70a36ab3edbd8459d2f51b52082137224889c615a3fcdaa0ac8"}}, &(0x7f0000000100)={0x0, 0x3, 0x29, @string={0x29, 0x3, "8dbdb96261dc36633c04a4f8feb106d54cd8544eaaafd3131ade7bbafef769fb7a99c018c323d0"}}, &(0x7f0000000980)={0x0, 0xf, 0xb0, {0x5, 0xf, 0xb0, 0x4, [@generic={0x93, 0x10, 0x3, "e99b3fefee1ea202d388a720c9ea8e59647dbc76ff9713ae31ad47d2ca422ffb8d6c39d2f2db14445c26112a2bbaabd8e21b8566414c9763c132bbb7839d03d2779a33c9e8d281e6ac3a9b99dcfc216b7207ba173abe0efeefe8d4ef127ef539a7665fd1431865412ff3dd550b1e1d6ba6913e9eb4fec3b1663ca36fa4c1abd138e4e931b3b1cbd37ae64d7324b3c9e5"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0xa, 0xdbd0}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x9, 0x4, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x8, 0x7}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x64, 0x2, 0x3f, "8b69d40e", "f7e70671"}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x1, 0x9, 0xfe, 0x3, 0x383, 0x43c}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)={0x20, 0xd, 0x81, "9f47f627a43ea99ddcbab092a57ed16fa337e21cac5e2b829170ce8155e00943163ca72bb92e1c7797344cd2b59274c18ad377fda61f7b834fe989a4997626fcbc8c3768a1838cabec550f77aea551ae76a3b7aeb5555cabcf7eb7bcd15122e9f1a23548852f65d8041ed505d73a16eaa34e92ff42903f230e7d9ac2e590eb8295"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x88}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x0, 0x40}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000d00)={0x40, 0x9, 0x1}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "cd52"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "d2f5"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x4e}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x7}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000073b6f010cd0ca31053f4000000010902120001000000000904"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x20, 0x0, 0x7, "5c3faf18cc6256"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x40}, 0x0, &(0x7f0000000000)={0x20, 0x1, 0x2b, "6e418abc261adf8791c1f3c41eb206f3910d1e32c37c89be3f3230193a842c25277116fb1ee4024ec38cd6"}, 0x0}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x5, 0x63, {0x63, 0x3, "565fa7d0bf63091eb50725eb8ac97f945dbe3450dbce4090e557cb5f86d7488fb6176738055392c5814ee6c1270c7591cb681396bba6674a2df1f835fdd2d83af771fe9778b5e0e15abeba18bc85a5a1a748d2907b9a8196da74aab927fef14e3d"}}, &(0x7f00000007c0)=ANY=[@ANYBLOB="000304000000040300008a1996747902531bc213ebf75000fdcb69d366ab1dd8f2da237f53e0009d95d4185240b3ffb924b0c292a74cef949098145f1c331ed7db55cde52980a9c203c2c861bbe4072fc38262a5669e8658ec3aa2afece6aa904908378a13380429d6390433d2e9efe9b1b15b7b684f2789259160e5793e62150654e533e9b23eededbee5bc818c8ba10ed82dc3962b257090d1ebb2b848a567d58d664a27"], &(0x7f0000000140)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x28, 0x4, 0x8, 0x3ff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x7, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "994b10e2d684b2305fe549b3bad044be"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x0, 0x7, 0x6, "bcf726bb", "72b2513a"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x46, 0x3, 0x7, 0x1, 0x0, 0x4, 0xfffd}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0x1, 0x1f, "1d1b9e30925ce74b017cb98aa97de1226fb495037430dcd81a45a0cffb7ca4"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x200}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x2af}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000480)={0x40, 0xb, 0x2, "3f80"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="c7d66cc88449"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="9c5f492f07ad"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "1ef8"}, &(0x7f0000000600)={0x40, 0x1a, 0x2}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) (async) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x40, 0x4, 0xe8, {0xe8, 0x5, "4e266e266d4d7c0e6fcd1caaf3552da476d4f4e82eacf94335d5c73ac0b13956716b57b1c08366f7355304beb2f112c7bca6531ce791869f966b7eb55a91ff8d3de59bebc6f33239838c17cb8c96699fa37a38a344a333be043b51f0edc8549090511346dc025f9cc04c2ad9ef6ac630c3ccbaa4da47e1911bca50e37d53a663fec6e6fd683dc486e9b9f714659551b31435e061940cc02af9a4359f32240ecca34a205d554569a8f16a87f119788ba0b7f7fcc7463f3b4b3a51293987dabfa127454a7f5a15e2f3e4a069b7c70a36ab3edbd8459d2f51b52082137224889c615a3fcdaa0ac8"}}, &(0x7f0000000100)={0x0, 0x3, 0x29, @string={0x29, 0x3, "8dbdb96261dc36633c04a4f8feb106d54cd8544eaaafd3131ade7bbafef769fb7a99c018c323d0"}}, &(0x7f0000000980)={0x0, 0xf, 0xb0, {0x5, 0xf, 0xb0, 0x4, [@generic={0x93, 0x10, 0x3, "e99b3fefee1ea202d388a720c9ea8e59647dbc76ff9713ae31ad47d2ca422ffb8d6c39d2f2db14445c26112a2bbaabd8e21b8566414c9763c132bbb7839d03d2779a33c9e8d281e6ac3a9b99dcfc216b7207ba173abe0efeefe8d4ef127ef539a7665fd1431865412ff3dd550b1e1d6ba6913e9eb4fec3b1663ca36fa4c1abd138e4e931b3b1cbd37ae64d7324b3c9e5"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0xa, 0xdbd0}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x9, 0x4, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x8, 0x7}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x64, 0x2, 0x3f, "8b69d40e", "f7e70671"}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x1, 0x9, 0xfe, 0x3, 0x383, 0x43c}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)={0x20, 0xd, 0x81, "9f47f627a43ea99ddcbab092a57ed16fa337e21cac5e2b829170ce8155e00943163ca72bb92e1c7797344cd2b59274c18ad377fda61f7b834fe989a4997626fcbc8c3768a1838cabec550f77aea551ae76a3b7aeb5555cabcf7eb7bcd15122e9f1a23548852f65d8041ed505d73a16eaa34e92ff42903f230e7d9ac2e590eb8295"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x88}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x0, 0x40}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000d00)={0x40, 0x9, 0x1}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "cd52"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "d2f5"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x4e}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x7}}) (async) 02:47:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000200)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private}}}], 0x20}}], 0x1, 0x0) 02:47:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xf000000) 02:47:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000f00)={&(0x7f0000000600)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@dstopts_2292={{0x18}}, @dstopts={{0x18}}], 0x30}, 0x8801) 02:47:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:22 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x1031fe, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1c9842, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r2 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'veth0_vlan\x00'}) sendto$inet6(r4, 0x0, 0x0, 0x20040084, &(0x7f0000000200)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) (async) sendfile(r4, r2, 0x0, 0x800100020016) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) 02:47:22 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, r0) [ 511.942235][T15044] selinux_netlink_send: 4 callbacks suppressed [ 511.942261][T15044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15044 comm=syz-executor.5 02:47:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) [ 511.989723][ T26] audit: type=1804 audit(1644461242.708:893): pid=15043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1144062135/syzkaller.9Fibzk/654/bus" dev="sda1" ino=1182 res=1 errno=0 [ 512.014492][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:22 executing program 0: socket$inet6(0xa, 0x0, 0x7ff) 02:47:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0) [ 512.100577][T15044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15044 comm=syz-executor.5 02:47:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x10000000) 02:47:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 512.232391][T15062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15062 comm=syz-executor.5 [ 512.262038][T15062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 512.282531][ T3737] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 512.316229][T15065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15065 comm=syz-executor.5 [ 512.545204][ T3737] usb 5-1: Using ep0 maxpacket: 16 [ 512.696804][ T3737] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53 [ 512.705965][ T3737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.716002][ T3737] usb 5-1: config 0 descriptor?? [ 512.985209][ T3737] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 513.187327][T15048] UDC core: couldn't find an available UDC or it's busy: -16 [ 513.194711][T15048] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 513.433371][T15048] UDC core: couldn't find an available UDC or it's busy: -16 [ 513.434681][T15067] UDC core: couldn't find an available UDC or it's busy: -16 [ 513.440938][T15048] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 513.448727][T15067] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 513.825134][ T3737] usb write operation failed. (-71) [ 513.833561][ T3737] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 513.844104][ T3737] dvbdev: DVB: registering new adapter (Terratec H7) [ 513.851189][ T3737] usb 5-1: media controller created [ 513.875083][ T3737] usb read operation failed. (-71) [ 513.895096][ T3737] usb write operation failed. (-71) [ 513.903451][ T3737] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 513.913121][ T3737] usb 5-1: USB disconnect, device number 6 02:47:25 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000073b6f010cd0ca31053f4000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)={0x20, 0x0, 0x7, "5c3faf18cc6256"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x40}, 0x0, &(0x7f0000000000)={0x20, 0x1, 0x2b, "6e418abc261adf8791c1f3c41eb206f3910d1e32c37c89be3f3230193a842c25277116fb1ee4024ec38cd6"}, 0x0}) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x5, 0x63, {0x63, 0x3, "565fa7d0bf63091eb50725eb8ac97f945dbe3450dbce4090e557cb5f86d7488fb6176738055392c5814ee6c1270c7591cb681396bba6674a2df1f835fdd2d83af771fe9778b5e0e15abeba18bc85a5a1a748d2907b9a8196da74aab927fef14e3d"}}, &(0x7f00000007c0)=ANY=[@ANYBLOB="000304000000040300008a1996747902531bc213ebf75000fdcb69d366ab1dd8f2da237f53e0009d95d4185240b3ffb924b0c292a74cef949098145f1c331ed7db55cde52980a9c203c2c861bbe4072fc38262a5669e8658ec3aa2afece6aa904908378a13380429d6390433d2e9efe9b1b15b7b684f2789259160e5793e62150654e533e9b23eededbee5bc818c8ba10ed82dc3962b257090d1ebb2b848a567d58d664a27"], &(0x7f0000000140)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x28, 0x4, 0x8, 0x3ff}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x7, 0x7fff}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "994b10e2d684b2305fe549b3bad044be"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x0, 0x7, 0x6, "bcf726bb", "72b2513a"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x46, 0x3, 0x7, 0x1, 0x0, 0x4, 0xfffd}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0x1, 0x1f, "1d1b9e30925ce74b017cb98aa97de1226fb495037430dcd81a45a0cffb7ca4"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x200}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x2af}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000480)={0x40, 0xb, 0x2, "3f80"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x1f}, &(0x7f0000000540)={0x40, 0x13, 0x6, @random="c7d66cc88449"}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="9c5f492f07ad"}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "1ef8"}, &(0x7f0000000600)={0x40, 0x1a, 0x2}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) (async) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x40, 0x4, 0xe8, {0xe8, 0x5, "4e266e266d4d7c0e6fcd1caaf3552da476d4f4e82eacf94335d5c73ac0b13956716b57b1c08366f7355304beb2f112c7bca6531ce791869f966b7eb55a91ff8d3de59bebc6f33239838c17cb8c96699fa37a38a344a333be043b51f0edc8549090511346dc025f9cc04c2ad9ef6ac630c3ccbaa4da47e1911bca50e37d53a663fec6e6fd683dc486e9b9f714659551b31435e061940cc02af9a4359f32240ecca34a205d554569a8f16a87f119788ba0b7f7fcc7463f3b4b3a51293987dabfa127454a7f5a15e2f3e4a069b7c70a36ab3edbd8459d2f51b52082137224889c615a3fcdaa0ac8"}}, &(0x7f0000000100)={0x0, 0x3, 0x29, @string={0x29, 0x3, "8dbdb96261dc36633c04a4f8feb106d54cd8544eaaafd3131ade7bbafef769fb7a99c018c323d0"}}, &(0x7f0000000980)={0x0, 0xf, 0xb0, {0x5, 0xf, 0xb0, 0x4, [@generic={0x93, 0x10, 0x3, "e99b3fefee1ea202d388a720c9ea8e59647dbc76ff9713ae31ad47d2ca422ffb8d6c39d2f2db14445c26112a2bbaabd8e21b8566414c9763c132bbb7839d03d2779a33c9e8d281e6ac3a9b99dcfc216b7207ba173abe0efeefe8d4ef127ef539a7665fd1431865412ff3dd550b1e1d6ba6913e9eb4fec3b1663ca36fa4c1abd138e4e931b3b1cbd37ae64d7324b3c9e5"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0xa, 0xdbd0}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x9, 0x4, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x8, 0x7}]}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x64, 0x2, 0x3f, "8b69d40e", "f7e70671"}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x1, 0x9, 0xfe, 0x3, 0x383, 0x43c}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)={0x20, 0xd, 0x81, "9f47f627a43ea99ddcbab092a57ed16fa337e21cac5e2b829170ce8155e00943163ca72bb92e1c7797344cd2b59274c18ad377fda61f7b834fe989a4997626fcbc8c3768a1838cabec550f77aea551ae76a3b7aeb5555cabcf7eb7bcd15122e9f1a23548852f65d8041ed505d73a16eaa34e92ff42903f230e7d9ac2e590eb8295"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x88}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x0, 0x40}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000d00)={0x40, 0x9, 0x1}, &(0x7f0000000d40)={0x40, 0xb, 0x2, "cd52"}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000e40)={0x40, 0x19, 0x2, "d2f5"}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0x4e}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x7}}) 02:47:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc0, 0x4) 02:47:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:47:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x11000000) 02:47:25 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) close(r0) 02:47:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) [ 514.350480][T15078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15078 comm=syz-executor.5 02:47:25 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xb7, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) 02:47:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}, 0x8000) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="140000000000000000000000020000000200000000000000140000000000000000000020010000000900000000000000b8000000000000000000000007000000830f42"], 0x1b8}}], 0x2, 0x0) 02:47:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001300)={&(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, &(0x7f00000012c0)=[{0x0}, {&(0x7f00000011c0)="db", 0x1}], 0x2}, 0x0) [ 514.401439][T15082] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:47:25 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x200000, &(0x7f0000000680)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'root'}}]}}) 02:47:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 514.550217][T15090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15090 comm=syz-executor.5 [ 514.693393][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 514.693410][ T26] audit: type=1804 audit(1644461245.408:898): pid=15093 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/695/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 514.721936][ T3737] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 514.985054][ T3737] usb 5-1: Using ep0 maxpacket: 16 [ 515.105657][ T3737] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=f4.53 [ 515.114771][ T3737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.134203][ T3737] usb 5-1: config 0 descriptor?? [ 515.378011][T15099] UDC core: couldn't find an available UDC or it's busy: -16 [ 515.385555][T15099] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 515.395421][ T3737] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 515.655185][ T3737] usb write operation failed. (-71) [ 515.672917][ T3737] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 515.683309][ T3737] dvbdev: DVB: registering new adapter (Terratec H7) [ 515.691263][ T3737] usb 5-1: media controller created [ 515.715330][ T3737] usb read operation failed. (-71) [ 515.738532][ T3737] usb write operation failed. (-71) [ 515.746666][ T3737] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 515.755561][ T3737] usb 5-1: USB disconnect, device number 7 02:47:26 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="81", 0x1, r0) 02:47:26 executing program 0: mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000004540)) 02:47:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}, 0x8000) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="140000000000000000000000020000000200000000000000140000000000000000000020010000000900000000000000b800000000000000000000000700000083"], 0x1b8}}], 0x2, 0x0) 02:47:26 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000240)=""/4096, 0x1000) 02:47:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x12000000) 02:47:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 02:47:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}, 0x8000) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="14"], 0x1b8}}], 0x2, 0x0) [ 516.179751][T15108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15108 comm=syz-executor.5 02:47:26 executing program 0: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) syz_clone(0x64001100, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) [ 516.244794][T15113] trusted_key: encrypted_key: insufficient parameters specified [ 516.259530][ T26] audit: type=1804 audit(1644461246.978:899): pid=15111 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/696/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 02:47:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) [ 516.261221][T15108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:27 executing program 4: syz_open_dev$vcsn(&(0x7f0000000040), 0x4, 0x14d000) 02:47:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:27 executing program 2: read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002140)='./file0\x00', 0x0, 0x0, &(0x7f00000021c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000004440)='./file0\x00', 0x0, 0x0, &(0x7f0000004540)) 02:47:27 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x952, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) 02:47:27 executing program 4: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 02:47:27 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, r0) 02:47:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}, 0x8000) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x36, &(0x7f0000001040)=ANY=[], 0x1b8}}], 0x2, 0x0) [ 516.558521][ T26] audit: type=1804 audit(1644461247.278:900): pid=15133 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/697/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 [ 516.592120][T15132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15132 comm=syz-executor.5 02:47:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x13000000) 02:47:27 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 02:47:27 executing program 4: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x79e73c1592dd2b1a) 02:47:27 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 02:47:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001300)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x4000010) 02:47:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 02:47:27 executing program 4: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) 02:47:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 516.810809][T15144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15144 comm=syz-executor.5 02:47:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}, 0x8000) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x1c, 0x0}, 0x0) [ 516.906122][T15149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:27 executing program 3: r0 = add_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="16", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) 02:47:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000080)) 02:47:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000001140)=@proc={0x10, 0x0, 0x0, 0x404}, 0xc) [ 517.029679][ T26] audit: type=1804 audit(1644461247.748:901): pid=15153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/698/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 [ 517.062414][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz-executor.5 [ 517.147594][ T26] audit: type=1400 audit(1644461247.848:902): avc: denied { connect } for pid=15163 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 02:47:27 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000002900), &(0x7f00000028c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$revoke(0x3, r1) 02:47:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 02:47:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005400)=[{{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) 02:47:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c, 0x0}, 0x0) 02:47:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x14000000) 02:47:28 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) 02:47:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002940)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x18}}], 0x1, 0x0) 02:47:28 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x0) 02:47:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000080)) [ 517.331958][T15176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15176 comm=syz-executor.5 [ 517.396677][ T26] audit: type=1804 audit(1644461248.118:903): pid=15184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/699/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 02:47:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) 02:47:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x44, 0x0, &(0x7f00000001c0)) 02:47:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000640)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) 02:47:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001300)={&(0x7f0000000000)={0xa, 0x6e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}, 0x200080c4) [ 517.451189][T15176] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:28 executing program 3: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 02:47:28 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_create(0x0, 0x0, 0x0) [ 517.579871][T15176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15176 comm=syz-executor.5 02:47:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:28 executing program 4: pselect6(0x40, &(0x7f00000000c0)={0x6}, &(0x7f0000000100)={0x800}, 0x0, &(0x7f0000000180), 0x0) 02:47:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x15000000) 02:47:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}, 0x8000) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="140000000000000000000000020000000200000000000000140000000000000000000020010000000900000000000000b8000000000000000000000007"], 0x1b8}}], 0x2, 0x0) 02:47:28 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') close(r0) 02:47:28 executing program 3: getegid() syz_clone(0x64001100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 517.843895][T15207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15207 comm=syz-executor.5 02:47:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000140)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000004ac0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x1318}, 0x0) 02:47:28 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 02:47:28 executing program 2: timer_create(0x3, 0x0, &(0x7f0000000280)) timer_delete(0x0) [ 517.967645][T15207] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, &(0x7f00000022c0)=[{&(0x7f00000012c0)="a8", 0x1}], 0x1}, 0x8000) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002380)="dc", 0x1}], 0x1}, 0x0) 02:47:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="1400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x298}}], 0x1, 0x0) [ 518.113799][ T26] audit: type=1804 audit(1644461248.828:904): pid=15214 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/700/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 02:47:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x8}, 0x20) [ 518.167218][T15218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15218 comm=syz-executor.5 02:47:29 executing program 0: socketpair(0x2, 0x1, 0x1, 0x0) 02:47:29 executing program 4: mount$fuse(0x0, &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x0, &(0x7f00000021c0)) 02:47:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@generic) 02:47:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x15020000) 02:47:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 518.422200][T15236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15236 comm=syz-executor.5 02:47:29 executing program 0: syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x880) 02:47:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 02:47:29 executing program 2: syz_open_dev$vcsn(&(0x7f0000000200), 0x51, 0x0) 02:47:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 518.473451][T15238] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 02:47:29 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r0) [ 518.589063][ T26] audit: type=1804 audit(1644461249.308:905): pid=15239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/701/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 02:47:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) 02:47:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}, 0x8000) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x4a22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14e1"], 0x1b8}}], 0x2, 0x0) [ 518.717720][T15236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15236 comm=syz-executor.5 02:47:29 executing program 0: add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) [ 518.781070][ T26] audit: type=1400 audit(1644461249.498:906): avc: denied { create } for pid=15253 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 02:47:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}, 0x8000) sendmsg$inet6(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 02:47:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x16000000) 02:47:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)={0x10}, 0x10}, {0x0}], 0x2}, 0x0) 02:47:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="1400000000000000000000000100000004000000000000001c00"/36, @ANYRES32, @ANYBLOB="ffffffffac1414aa000000005c0000000000000000000000070000000086050cabb00144443891ac1414aa7fffffffac1e010100000006e000000200000004ac14143d00000007ac1414bb00008000ffffffff0000000164010102000000017f00000100010001000000000020"], 0x298}}], 0x1, 0x0) [ 518.916569][ T26] audit: type=1400 audit(1644461249.508:907): avc: denied { write } for pid=15253 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 02:47:29 executing program 0: r0 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="0e", 0x1, 0xffffffffffffffff) keyctl$assume_authority(0x10, r0) [ 518.975737][T15263] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15263 comm=syz-executor.2 02:47:29 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000040)) 02:47:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 519.051619][T15268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15268 comm=syz-executor.5 02:47:29 executing program 2: add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 02:47:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000780)={0x14}, 0xffffffffffffff40}}, 0x0) [ 519.126242][T15268] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:29 executing program 3: add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="e2", 0x1, 0xfffffffffffffffb) 02:47:29 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000001c0)='n', 0x1}], 0x2}}], 0x1, 0x0) 02:47:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00', @ANYRES32], 0x28}, 0x0) [ 519.337644][T15279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15279 comm=syz-executor.5 02:47:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x18000000) 02:47:30 executing program 0: add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000180)="93", 0x1, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 02:47:30 executing program 3: add_key(&(0x7f00000000c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 02:47:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:30 executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) 02:47:30 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, r0) 02:47:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28}, 0x0) 02:47:30 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x100, &(0x7f0000400000/0xc00000)=nil) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(0x0, &(0x7f0000bac000/0x1000)=nil, 0x2000) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000eaf000/0x1000)=nil) r4 = shmget(0x2, 0x3000, 0x80, &(0x7f00009ea000/0x3000)=nil) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000240)=""/103) r5 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r5, 0x0) shmget(0x1, 0xc00000, 0x100, &(0x7f0000400000/0xc00000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/56) shmget(0x0, 0x2000, 0x800, &(0x7f0000a72000/0x2000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000140)=""/218) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) add_key(&(0x7f0000000080)='keyring\x00', 0x0, &(0x7f0000000100)='\t', 0x1, r6) [ 519.614578][T15296] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:30 executing program 4: timer_create(0x1, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f00000001c0)) timer_gettime(0x0, &(0x7f0000000200)) 02:47:30 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000100)) 02:47:30 executing program 3: syz_clone(0x51524080, 0x0, 0x0, 0x0, 0x0, 0x0) 02:47:30 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x100, &(0x7f0000400000/0xc00000)=nil) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(0x0, &(0x7f0000bac000/0x1000)=nil, 0x2000) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000eaf000/0x1000)=nil) r4 = shmget(0x2, 0x3000, 0x80, &(0x7f00009ea000/0x3000)=nil) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000240)=""/103) r5 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r5, 0x0) shmget(0x1, 0xc00000, 0x100, &(0x7f0000400000/0xc00000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/56) shmget(0x0, 0x2000, 0x800, &(0x7f0000a72000/0x2000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000140)=""/218) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) add_key(&(0x7f0000000080)='keyring\x00', 0x0, &(0x7f0000000100)='\t', 0x1, r6) 02:47:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x19000000) 02:47:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f00000012c0), 0x2, 0x0, 0x38}, 0x0) 02:47:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="14"], 0x188}, 0x0) 02:47:30 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x100, &(0x7f0000400000/0xc00000)=nil) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(0x0, &(0x7f0000bac000/0x1000)=nil, 0x2000) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000eaf000/0x1000)=nil) r4 = shmget(0x2, 0x3000, 0x80, &(0x7f00009ea000/0x3000)=nil) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000240)=""/103) r5 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r5, 0x0) shmget(0x1, 0xc00000, 0x100, &(0x7f0000400000/0xc00000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/56) shmget(0x0, 0x2000, 0x800, &(0x7f0000a72000/0x2000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000140)=""/218) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) add_key(&(0x7f0000000080)='keyring\x00', 0x0, &(0x7f0000000100)='\t', 0x1, r6) [ 519.989380][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 519.989397][ T26] audit: type=1804 audit(1644461250.708:910): pid=15321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/704/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 02:47:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@proc, 0xc) 02:47:30 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$unlink(0x9, r0, r1) [ 520.056143][T15320] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:30 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x100, &(0x7f0000400000/0xc00000)=nil) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(0x0, &(0x7f0000bac000/0x1000)=nil, 0x2000) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r2, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000eaf000/0x1000)=nil) r4 = shmget(0x2, 0x3000, 0x80, &(0x7f00009ea000/0x3000)=nil) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000240)=""/103) r5 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r5, 0x0) shmget(0x1, 0xc00000, 0x100, &(0x7f0000400000/0xc00000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/56) shmget(0x0, 0x2000, 0x800, &(0x7f0000a72000/0x2000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000140)=""/218) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) shmctl$IPC_RMID(r3, 0x0) add_key(&(0x7f0000000080)='keyring\x00', 0x0, &(0x7f0000000100)='\t', 0x1, r6) 02:47:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:30 executing program 4: syz_clone(0x42102180, 0x0, 0x0, 0x0, 0x0, 0x0) 02:47:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 02:47:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x2, 0x0) 02:47:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1a000000) 02:47:31 executing program 0: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x855ab608e786d74d) [ 520.392247][ T26] audit: type=1804 audit(1644461251.108:911): pid=15336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/705/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 02:47:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="14000000000000000000000001000000", @ANYRES32], 0x298}}], 0x1, 0x0) 02:47:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x1, 0x0, 0x7}, 0x20) [ 520.508277][T15344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:31 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004640), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 02:47:31 executing program 3: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001340)=[{&(0x7f00000000c0)="6f20274fd9686e194dd494a6e7a7228c110f00c0ebfc6badeb9b62ee6c975fd8eaacfefabf3c8409a3123c19e3d9171d30", 0x31}, {&(0x7f0000000100)="58b075ba165211484bb1e8d6a64f9d5fb9c49bdf84a47b16c58558ee4edb", 0xfffffcef}, {&(0x7f00000013c0)="dbc3aa17b0e20058e20a6ffd8de8316c96eaf816d2bd5303036c4cd9c22dd6f64dbf530767fb211754f7325c9a9a146d3fe3f3ba71f278e2ea57fdbc468ac72ba025e8c01b56754e53ac7ef20d7f8def68a90f79ef03f7b57890ae7c32afaa4adf6380b0db64398c5d6babfc8d367fa1eaf12386f26270c8b3f1b3d9a76a8fa9c604adff415a2ab3857b3a263c3f869c5acf80b53cca329efde3490f16c9dcb162fb5fd011", 0xa5}, {&(0x7f0000000200)="140b796c73272ffada622842d14a4e4360225fe1291daf4f7d3bcac0f393e388a71c9a6158a7687236fb2c4152a87453e706a32491fb6a4beb7766c3b971c9f91474c2992a750819053c2a059208ee99e5e0c8d9a5e6e63c75", 0x59}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="2fc42e979b4d9b2554af582466baf06e7acc736a38e0c4d79d4fec287476939729a2f30949206ff21c41e22fab42205473b2d4aef18736a7a96ab22af0467d0986792224905360b43471e4b1bfa9e60e61a84fda658f14a9af06ae859c25db69d3e4e23bb85dd96c8f40d14a62ac7d2f23b99b1562b789c7c6ae9ab9092a2ddeb6425f766e0108d7bc9f867be7092daa94ac08dfc85d0a200b6b33b0d25eb5c6203db52b0454bfcccdfa5d18386a4e268493ac6eb370a8e099200b75", 0xbc}], 0x6, 0x0) 02:47:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005400)=[{{&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_u8={{0x11}}], 0x18}}], 0x1, 0x84) 02:47:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1c000000) 02:47:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}, 0x20048091) 02:47:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}, 0x0) 02:47:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}, 0x8080) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0xffffffffffffff0e, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000f84eda5c22467489c0ba1ffc8a6cd83c57327f9245a7fe7e00ee38127f"], 0x1b8}}], 0x2, 0x0) 02:47:31 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}) [ 520.852405][T15362] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x80}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 02:47:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, &(0x7f00000022c0)=[{0x0, 0x13}, {0x0}, {&(0x7f00000012c0)="a8", 0x1}], 0x3}, 0x20008000) 02:47:31 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x47, 0x12042, 0x0, 0x1d) 02:47:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1d000000) [ 521.016312][ T26] audit: type=1804 audit(1644461251.738:912): pid=15373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/706/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 02:47:31 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', 0x0) 02:47:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001280)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="14000000000000002900000043000000341c"], 0xd8}, 0x0) 02:47:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local, 0x4}, 0x1c, 0x0}, 0x8000) [ 521.188254][T15383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 02:47:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:32 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, r1) 02:47:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 02:47:32 executing program 2: geteuid() syz_clone(0x64001100, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="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") 02:47:32 executing program 3: select(0xb, 0x0, 0x0, 0x0, &(0x7f00000002c0)) 02:47:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1e000000) 02:47:32 executing program 4: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/158) 02:47:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="1400000000000000000000000100000004000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffffac1414aa000000005c0000000000000000000000070000000086050cabb00144443891ac1414aa7fffffffac1e010100000006e000000200000004ac14143d00000007ac1414bb00008000ffffffff0000000164010102000000017f00000100010001000000000020010000000000000000000007000000891777"], 0x298}}], 0x1, 0x0) [ 521.455253][ T26] audit: type=1804 audit(1644461252.178:913): pid=15395 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/707/cgroup.controllers" dev="sda1" ino=1155 res=1 errno=0 02:47:32 executing program 3: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x6) 02:47:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0xfffffffffffffea3, &(0x7f00000003c0)=[{0x0, 0x29}, {&(0x7f00000002c0)="2891025f80c6de6d71d652e111a9a1fa4fcdb19e308baba7e3c298a9add3050ca7d3f232c7d7e5332c605fe80951e465c64e50a28fb0107d1b29ad46182c3db1c53fecf30ef9bb9544f3a2fef3b84a3079adda0eecd5c577077a44877368460411c256b09fbefe20a27c12273e4704880f7c9895c562b9e1fb45729c9776e0b95a46b5e0d26e227ae5b4b40ce83b35349b600e54b078912fa6de8e9c0c262801feffffffffffffff80be0000", 0x1}], 0x2}, 0x0) [ 521.538019][T15406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:47:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)={0x10}, 0x10}], 0x1}, 0x0) 02:47:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:32 executing program 4: sched_getparam(0x0, &(0x7f0000000340)) 02:47:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1f000000) 02:47:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, &(0x7f00000022c0)=[{0x0}, {0x0}, {&(0x7f00000012c0)="a8", 0x1}], 0x3}, 0x8000) 02:47:32 executing program 2: semget(0x2, 0x0, 0x2c2) 02:47:32 executing program 4: r0 = shmget(0x2, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 02:47:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x20000000) 02:47:32 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdr_2292={{0x18}}], 0x18}, 0x0) 02:47:32 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) [ 522.102379][ T26] audit: type=1804 audit(1644461252.788:914): pid=15427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/708/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 02:47:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c, 0x0}, 0x8000) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 522.151045][T15437] selinux_netlink_send: 16 callbacks suppressed [ 522.151064][T15437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15437 comm=syz-executor.5 [ 522.462873][T15437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15437 comm=syz-executor.5 02:47:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x40) 02:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 02:47:33 executing program 4: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x88482) 02:47:33 executing program 2: add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 02:47:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x20030000) 02:47:33 executing program 3: keyctl$setperm(0x5, 0x0, 0x993cef75c311f9b2) 02:47:33 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, &(0x7f00000001c0)="1e", 0x1, r0) keyctl$read(0xb, r1, 0x0, 0x0) 02:47:33 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000002900), &(0x7f00000028c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) [ 522.639815][T15456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15456 comm=syz-executor.5 02:47:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="1400000000000000000000000100000004000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffffac1414aa000000005c0000000000000000000000070000000086050cabb00144443891ac1414aa7fffffffac1e010100000006e000000200000004ac14143d00000007ac1414bb00008000ffffffff0000000164010102000000017f0000010001000100000000002001000000000000000000000700000089"], 0x298}}], 0x1, 0x0) [ 522.716499][ T26] audit: type=1804 audit(1644461253.438:915): pid=15450 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/709/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 02:47:33 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000000)='keyring\x00', &(0x7f0000000080)='\x00') [ 522.779225][T15456] __nla_validate_parse: 2 callbacks suppressed [ 522.779244][T15456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:33 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@rthdr_2292={{0x18}}], 0x18}, 0x0) 02:47:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000240)={0xa, 0x4e20, 0x0, @private0, 0x6}, 0x1c, 0x0}, 0x0) 02:47:33 executing program 0: syz_clone(0x104400, 0x0, 0x0, 0x0, 0x0, 0x0) 02:47:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'sit0\x00', 0x0}) [ 522.943907][T15472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15472 comm=syz-executor.5 02:47:33 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r0) 02:47:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x21000000) 02:47:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 02:47:33 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, '/dev/vcs#\x00'}}]}}) 02:47:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="1400000000000000000000000100000004000000000000001c00000000000000", @ANYRES32], 0x298}}], 0x1, 0x0) 02:47:33 executing program 2: clock_gettime(0x2, &(0x7f0000000180)) 02:47:33 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) [ 523.233679][T15491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15491 comm=syz-executor.5 02:47:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}, 0x0) 02:47:34 executing program 2: syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffffffff, 0x840) [ 523.279283][ T26] audit: type=1804 audit(1644461253.998:916): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/710/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 02:47:34 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0xfffffd1d) 02:47:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) [ 523.379268][T15491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000001c0)) [ 523.547381][T15491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15491 comm=syz-executor.5 [ 523.565375][ T26] audit: type=1400 audit(1644461254.288:917): avc: denied { getopt } for pid=15510 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 02:47:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x22000000) 02:47:34 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) 02:47:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 02:47:34 executing program 3: syz_mount_image$fuse(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}}) 02:47:34 executing program 2: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x123201) [ 523.720385][T15516] fuse: Bad value for 'fd' 02:47:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 02:47:34 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 02:47:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, &(0x7f00000022c0)=[{0x0}, {0x0}, {&(0x7f00000012c0)="a8", 0x1}], 0x28f}, 0x0) 02:47:34 executing program 3: r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x4041, 0x0) fcntl$setstatus(r0, 0x9, 0x0) [ 523.804440][T15522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15522 comm=syz-executor.5 02:47:34 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "682d6d3ace4f4a21413919fecad34d63703802476dd31c59d99e697687f7695ff8c9d81d54146c48235b0f3225fda4c3b3db5bb155086e016653889d9ac219c5"}, 0x48, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) 02:47:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000780)={0xb}, 0x14}}, 0x0) [ 523.924194][T15522] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 523.947029][ T26] audit: type=1804 audit(1644461254.668:918): pid=15524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/711/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 524.059773][T15522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15522 comm=syz-executor.5 02:47:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 02:47:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2001884}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 02:47:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}, 0x8000) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000dc0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001040)=ANY=[], 0x1b8}}], 0x2, 0x5) 02:47:34 executing program 2: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) 02:47:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) 02:47:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x24000000) 02:47:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x0) [ 524.276037][T15547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15547 comm=syz-executor.0 [ 524.290529][T15542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15542 comm=syz-executor.5 02:47:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000780)={0xfffffffffffffe70}, 0x14}}, 0x0) 02:47:35 executing program 3: syz_open_dev$vcsn(&(0x7f0000000500), 0xb2b00, 0x4000) 02:47:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=ANY=[], 0x298}}], 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000001300)={&(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) [ 524.355338][T15542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:35 executing program 4: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0) 02:47:35 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r0) [ 524.508246][ T26] audit: type=1804 audit(1644461255.228:919): pid=15560 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/712/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 02:47:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c, 0x0}}], 0x1, 0x20040840) 02:47:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth1_macvtap\x00', 0x4b3ad46c9f4e17e9}) 02:47:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x25000000) 02:47:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002940)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) 02:47:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 02:47:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000f00)={&(0x7f0000000600)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@dstopts={{0x18}}], 0x18}, 0x0) 02:47:35 executing program 3: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}) 02:47:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) [ 524.696378][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, &(0x7f00000022c0)=[{0x0}, {0x0}, {&(0x7f00000012c0)="a8", 0x1}], 0x3}, 0x0) 02:47:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000f00)={&(0x7f0000000600)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@dstopts={{0x18}}], 0x18}, 0x0) 02:47:35 executing program 3: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r0) 02:47:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x26000000) 02:47:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002940)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x804) 02:47:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000f00)={&(0x7f0000000600)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@dstopts={{0x18}}], 0x18}, 0x0) 02:47:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 02:47:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 02:47:35 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 02:47:35 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) 02:47:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000f00)={&(0x7f0000000600)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@dstopts={{0x18}}], 0x18}, 0x0) [ 525.024589][T15596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:35 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000001200)="6bf247486e49b9bb8c9abe52c57bc076ababf3f03eb47d2f4e5d47ec601c31ae48b614b818b3328a299d5e70802ce0d93e621804a335bb19a36df8921544e3672a0581834b113e0d88b1af3f6b1ff91e68043da3de4453e8c6d6bf66cbabc40f35a4f2f0fc41773446d67103f5b82c1194e7ca304e807ca7f49c6058d65edf232f6f50302fd86601fa79f63be6ffea854a93809b476b8aa5e24f5d01defd1e3e12d8075d22d1060a8207ec15b6a11a5431b903c21a2b376ef9662e05632e3ba8feeec56bfa48fd30402fa6304d29e4cd52eb8f722a89097a4404376931d6611f82ea35b79e2d199366f8569ebd88425a982f34d1e89c9e9c45e1e0149a1d00857d67fe3f47547f7d0a371152c4873bb5dc60946161880aaab062354f635c78b05b36984b99cf7c68798bfc10362ca98f79cebb0b3cf2e5dc756cd4aadbc5681b28cae6aa9bc44763d706d0f8b3149e5902bb20006c03cd31e1a99f1dd7b4d064bf47728a935d19cf654e4edf8db665147473154b51106bbf3b5bbd1a1c263e38b46f26a7b1c61a2e74921a00fec4c4c767b9a4a9cda0ddf3ac98180152e25e04913aea36297641010b83d0a4462a666f58269ecbb7a048652dcb804b4f2c9264a3bb4a66fc0537bfb60a0250ad5ba9170c8dccd33d517329e945839336934d5ba2977d10cb9f376a867774c049c6bfa6ab0460388ec553d94b5b8b6c66b80413342b9efa5402544872c8d34c45919d478e0ad6e4c8aca9f5aaf68bdbceb9cacab6abe08d241cea92cc2244e9d7e73fb7ddc9190fa47eb4a74ee786df3d712487e0f8eb97e34859fa8c6cf9ad75c1ba1a395dbb3aa9bdc3ecc89b5cb288112d094b4a038e4a26bf5acc9ffb6599972b7b0fb237b13f118c682cad3aaffcbe65aecb882b2dff849b955c9acc3e46fd007d9bcc74cadd6de0be9c6d253045e22befcde93defba0cad65a55bd783204b00c608cfddc97b7d5e08d8cbe99b4f0b399c134b169b0d2fd58e3b9ecf76037b3e264b6eeb99e679ac2b5b1762d9ae8c7fd8865dbefbaca4526ea2df816a92201897ef2233c47b56451ab9e47953bd6704d27fb261830994d0d6e13770420e810c35cc38eeb8258b704eaea1ce377a80399cb25376d12dc5ddea245027d904b3861cb5461e0a162d972f97048c76bf3907c2a21381b73dbd111a9fa58544677fcbbdb715cad33381e49edc6d8193ca75463882389c038e283acd23d9ed203ac3c6096ae0ab651654d06fbd01ee5fc1114787b1a8fed081bb7906f328bd70dba64ede7d8693671fe56011013144a703af18284881770f8e25d0b8c46c65d944e33b2daaede9aaf2883d8f0f4579ae38f0afc00d7b597126954cc45627ab7752b51fad0f289767ac79ef10e9f8b9eb9d42b4f39571159c6000a821be7617619d7354e6912a078c9b8997fe06bae1d34cf024a9d1da595c3bbd58509d8a88bf7d24d75df81d7e192351fafda26182c06fa0e5b0f0179eebbd5d4b2758b1f27b932397462a7e27b322a1eec730a8e35d6c520f29b33256eaaa4e971da70bc4d53c7fdfb2c7034b0f7d91975c762b11ecfc6b9300e9550f1ed588ca5766afb9c62568bcd542581c64b0381de4c4afb5bcd9048d7db54a6dcf8101e69d9102ebc64701c82451cab7a24f3562c7ed7a07fae2002d2fd7681d77b078dfed7efadfba69bec9518503bc20cc52119953201fedeb71ed8778ae7b33d0b2e30a2e0baa1246646cbf72452c9882b3fd797190d6a736b763ea363b5696ec470e4cabb636ffe99dc04fc0093cf30a40be458fe4a65c43c86221cfcf19c29849ef3c5ade3e011f4db72d78afa4d4d99ac5311c8725d8cbb7c1eaa80fb98b49f8e0359c71d8863caec6301edbb084646a89a63ebb8aa10812fc1da3e87ad357740f91a6b112767e84e9ff4ce6f6d240ef685101205f823d41525e65288754a44d677894e76e206d09a15f38d70d35aa46d679f935e633465f046f28b82a492a8d224235eb88ba6f602142c4d45584fd18317da11d78abff4ec36b38d282f5606050026c73be6f79adbee544a13b51f99517bb5aff8da92fb0f64c8922064a49071f3573404159b0b27b576723139288a021a00c1c6a6b238dec1e677116ad54fcb9f1a12f01b14d8596e071caa3757b4c580f7ef05d3aae01c608d13719ca18dbf883b1f5beeb407ef60c0fb9790c4ad6d8fe81d38d77f2ce0dc5a9d221cb69265e1b58c7ff788dea64d113407766043909ca2e555d75c9f0a15ca2337810850d8c481d561c28145cf88e47aa75155cef73164c88855e67a32ebbd9a543328f984006db8ae0dca6149e4b7ce342aba69e4a09da16a7ddc052b99177d7c2cb92f56e2e2aebb07957dea52fed4f6c4ceb195552ea1849f40c7e89d4741abeffd29436d88966f3b52ade008b6e83e20086f7bdc62d7e5fbbdb0daea73a54c011d9c4ec7e6b13c6b311ec8539a5a587b68367ebe4e428fd1a5d3d2f31a1d4f395946f3db3a2f7e2b26decb23de91f1365e3b6c3a76ba929e3b27bb46d488f4253ed5a39d6095daac7f978524c0c8d57e51c29744ba4d1e3a95d2d056ebb8aed49be2ee107092be5d3db5f8e800ad66ba37e669fd0ab2e6e352ff0d59b0c69d763ad1285b5806554461389406166de27825144521b2cc4b35ff1777ec85d616c0d5f4b2bcdf58b89a4ab1ed1a76b7e791ccc54c95c8d0062ab9367ff475a356e8ca487d3e77bb29de38b8782d76d285c27351c9cadeab58cb88b54fb49176723c4c1faabfc04fd8fc779f57dd6bb6bedfeef3be538f9e8e830f67d3c65b4f6d8864eee7051ad9c9ecdc47c6de67f47896a57af3de6b351470d12165baef1cfefb144a6aa20cf6de26c7a7f80f305f758f0adc5eddfd01ba2e1003157ea106c1473c633b8301b2a19a3917061f90f84e03ce8051694d69606d977f0c4dc6e13d7a0ec3c5ee78ce52a935bd8846d92ce1d76eae0ceed2474970861c77df6f12084bf9f385841ffade0bcbac6d14766b0df52af062103a5de9f0348d99211987fa93f5d49c80410ebaff3dee7838d82d66eb7e4384aada182027c73b9e37a7a8c49e2422a7022238c79f096f8381388d19b73c5ae51023cd92866d42de3250be539e134c164b90306dda11584e243f38c7d7fb33411f784895bf66aa8b1577bff9e7c973041c1c2d9c58e4495c8b849f6a17f2598f84a68547a5f1f7d0ee4be42121c60c5de67d163cb9febb84548fe5e1bdacb99f895391961efeb0453f50ec3f72b85e49e7745c3d0cdc001bcc66ef26c9b6b84f9e6af7ae5f4b03f189b4dcf95b900d58381a79c4a18c5fd296a82f5c95b08d8204310890088d18b0926418563b1e5289371e5072604f5130466150586677663dfc3ea299092386f341ad6a803cdade9dc2a614fa5997c9b259e9ef064c669d2956cd5f3940c21e4563e1870202de5c53f54d98756dddb0239ed50e52fc749e2fb1c5092c2a8e16c94457c5f3449854b63d26791203bf0148e490332688a2687dc907db666ce18944d3fa5609addcbdf0206820e2e07143b501cd5f41b6ad1618dcfc1258559f644dd22eeb7824506f97f73fd053806e7a2547b0d1a694838fc72c81d5e1c57f3e6015cb02122ddd57696fd92c8e0dbe569da0f60fbc2e6666b1c975f2df4c74afc6770bc4679ba89dbd6a7834e48a9711d2697e2d73aec693dbb36d3efaa5c2e20ac1b3971a70e01b2f9f0b0f3f57a07527f0e1d9a751177d207648c88e827354cfe14d22a794c9a2f94faed04cd21039969439eb7e5ecd2c47db3c167291d89417793b176905102c7ba21520087f0e5a651e80d35e60a0eb4b364c87090b7a559f82b0ed4a5cfffa123fbc9304f7c6fb2b3faf55cb1e44fa74e08b007946815822526c9ac71c5d4ef8bed7b2daa44b69b22d01613187f15168da489848aa2c0f7b6caa91ed75e954183b15c3a151c522f5765f38a2b48f357fbbc4d256c0d33cbc75f6046fb9e099cb576cffbff32dcd62af5e92ea1d611e66d1a87edbe4b8496c0560ffe785a17a82cdf7125bc395c13b4b0665dc59e5381263efcfdae67267f02e4d9f5f39ab247a58d9a9f8f95147369aa79554c72a8fa47330912e2e17f5b478ed214c6faf615494d285d55a828f2126c073fc5e4d094154375d2f87d611b34b6133371e5c2554525500b7fef1bb2abf9897bd1992a230bcaaa5289597cefcc936d71e7cc32a125986bef7585cbaabf0e30943c1b33df650e2459c388eca3cd8aa3f9295fcd2cd2af5856a011033a21c3162d72da98695c61e01039cc280dda3b403641fe45556a662bdf6266a4fae506b0d9e62140905dd4431ee3f688e674d4c428d3b193572a624d6d615c22c115cb92c9d12226e62d332d35ca17c72a15cf55840b6db614ecf028b5f5d387d4b3964b2b6949bba477ee04f67fb37d3935a268e9a3cb97d3f523443503950a7bfa0ffe423d2b96240fc2ecb6f7837c16d01acc9c3222e83ef7d9fceaeec74a5a6ba88994fb2d6512aca97a1c24a0a58f62ceb280f94ec0a63b9992bd7b699b87b2178d4d20da237e8b1815fa68ae10c7cde46b308ad34b2414bbbea0cd90abfbfeea2de3835e9f3a05b2205316abd1c9bf9238a9e0d74ac7d95212f17ac62155e76b4288e6fb234bdf9317827429527bced23aa77f75a2528aae6168011f727af5e87127414fb2f8b932d6bb9708bf9d26f3db55a8e5c3648b2604939b53a93ce16a30760c2358e260da69e1d676df47e8de77038ea611b1d4a960d77a80b3e9fa2ce36e04218343b97675b358b6cb3d9f5cb52389fe8a3f55d3291a13d1e2d49f292d93329723928f4249b0423760d2db5b56fae147c74c9bdfbeebe9d459a70bba486e73440855597fc7ba35725e0bb07aa702ee13d592f11dcf375581b35a3fc92c781f4dd0e6e538964025a2e99d6c8b0d81e8d221c90c26b8a4907d217a72473ab7a233cd92571ecda0814decf289d0fff4dd7973e8872e0f76fc3f9de336c6d1fe8eb16b600b4f250b6fdce1560cfa9fb36ea8516971309f97718fdcfd74574e0b40aa99ad1d3501ebc17d0e3f0d635958f374f1d89124224c4162b27fab56881771dcc42972b07fc71b87f676c784635ad5da502a92b83109f2d9b1000bff0ceade260f6d13b4b99aa4a38e8e253b63256c4977edaae455d819fcb1b0434f359b44ca8ee81499f20c119bb856a963510044c5ee4df5dcb0aa0c64f8759d6d24281d072ef57fc8148802b0fe6f77613e54db2959f5468135bd8ebc4711a2fba5104baab74d80f5144eead3bbe9fda8b3d044b620c50a296d9ad52f1de3ad6ace4bac7ef7318cf8dcaf280d93f1943fe36cd98a72c56c5309bc68cca7589a1365fb21438b2092024a3317a2ce00b2e947cb4d4e58a7f99d0ca1740a63946e9948bf8d9127dd81862a08458157aae2df88d9df8cceae69dbd5ce7b6c780c293b46ddb792aff78ab17839f7122c7111e40069eebca39e7b84a2fa8e3cdddde20a0c4a55f92630bea93ba533455480d346a78b5f80799a1c751cbab9161d83769662a4751e42312080a0ede0d999d7a41fa5de81082e1a0e182c8d5fbad899c1d9d95e249da84e285ebe8621ecace1541571b3ce2eb9029edf9f8f08b69af99b5acf43755f6d126bbb358d7359f9e66d571e2f0ed6ea0d21a9102720cca75a122a3be5676749b00853d9afd13602f93e0465b09274cb92104ae3c68381b59fabddad57b1e2e0cb45340e3e2ec6d858d24215540ef7d57d3e623aa0b5cbfc0ec9df6166181d343ddf90de32435da8cf207b29", 0x1001, r0) 02:47:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x16, &(0x7f00000022c0)=[{0x0}, {0x0}, {&(0x7f00000012c0)="d7", 0x1}], 0x10000000000000e1}, 0x0) 02:47:35 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffffffff, 0x0) 02:47:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001300)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}, 0x0) [ 525.174863][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 525.174880][ T26] audit: type=1804 audit(1644461255.888:921): pid=15602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/714/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 02:47:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x28000000) 02:47:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local, 0x4}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000001200)="75a99ee7835968b398233d2ec5bb3feef227e9e385139f284b2d050db67d0d0bfc6a00927b52a8be6610177e130cc7602e51a7ad73ba3bf33ff0b25d90a5e9cf85911c7ef813eeafde4f20f69b4067c5d7c804294459fa8d17a408b881248cc107348068685cf9c94c", 0x69}, {&(0x7f00000012c0)="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", 0x544}], 0x2}, 0x0) 02:47:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 02:47:36 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000001c0)='n', 0x1}], 0x2, &(0x7f0000000780)=[@ip_tos_int={{0x14}}], 0x18}}, {{&(0x7f0000000800)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) 02:47:36 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000140), 0x952, 0x200000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) 02:47:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000100)) 02:47:36 executing program 2: timer_create(0x0, &(0x7f0000000080)={0x0, 0xf, 0x2}, &(0x7f00000000c0)=0x0) timer_delete(r0) 02:47:36 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)='\x00') 02:47:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002340)={&(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0}, 0x8000) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b8}}], 0x2, 0x0) [ 525.496616][T15626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 02:47:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000780)={0x14}, 0x14}}, 0x0) 02:47:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="1400000000000000000000000100000004000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffffac1414aa000000005c0000000000000000000000070000000086"], 0x298}}], 0x1, 0x0) 02:47:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x29000000) 02:47:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000009d00)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000140)="23d6f2e2e01672f546c31c0ad451e75de3adf0f3a55a7cb400c125c70e29bf44a84ba8fee1b01820e07e6db4ceeca28b372800db91f4018cb4f96a7bf06cb15f013dbfc43b0209107b73732db30835f92553cb6cad42675896e001a61b4970940ae1caa5635ef78b1fe6d1b8a22c258407266a64c254b252f6920e8986e305767b5d77069fb25c49c589457b0c8a897b78df839078214cb9faaf1d478b7d4242277d71", 0xa3}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="5790e76f3790dc0c8bb459986a6f839990bcc661", 0x14}, {&(0x7f0000001240)="5f966790c9495b89d1c0e3ac5d8d6cc80fdffce33d5351a473f67e14bb", 0x1d}, {&(0x7f0000001280)="7d0eb5bd2026767d2e6fefc4e4d8ef958a31bfb9fff7e2b59a0c2367ff", 0x1d}], 0x5, &(0x7f0000001340)=[@rthdrdstopts={{0x18}}], 0x18}}, {{&(0x7f0000001380)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, 0x0}}], 0x2, 0x0) 02:47:36 executing program 2: syz_mount_image$affs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x200000, &(0x7f0000000180)={[{'\'\x89'}], [{@obj_user={'obj_user', 0x3d, '/dev/ocfs2_control\x00'}}, {@hash}, {@smackfstransmute}]}) 02:47:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000580)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="9eda03e20354", 0x0, 0x0, 0x0, 0x0, 0x0}) 02:47:36 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 02:47:36 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0x0, 0x0, 0x0) 02:47:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 02:47:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100), 0x4) 02:47:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) [ 525.834714][T15652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:36 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_secret(0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) getpgid(0x0) syz_open_procfs$namespace(0x0, 0x0) 02:47:36 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="549c7b9d287bf6e0ad8008502cc4dcb1fad06036c875dee195644655ecfb02e178dcde7326d852ed4b27e8ee61a9b72ac8540554ab9c", 0x36, 0x0, &(0x7f0000000340)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 525.967407][ T26] audit: type=1400 audit(1644461256.688:922): avc: denied { ioctl } for pid=15661 comm="syz-executor.4" path="socket:[73488]" dev="sockfs" ino=73488 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 02:47:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1, &(0x7f00000000c0)=@raw=[@call], &(0x7f0000000100)='syzkaller\x00', 0x7ffffdff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xd, 0x6, 0x2}, 0x10}, 0x80) 02:47:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x29020000) 02:47:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff000000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0) 02:47:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:36 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000002880)={0x0, 0x2, [{}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}]}) 02:47:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r1, r0, 0x0, 0x61c2c9d9) [ 526.189636][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 02:47:37 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) [ 526.303517][T15680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff000000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0) 02:47:37 executing program 3: r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x4041, 0x0) fcntl$setstatus(r0, 0x4, 0x4400) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="eb", 0x1}, {&(0x7f0000000040)="05", 0x1}, {&(0x7f0000000180)='d', 0x1}], 0x3) 02:47:37 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r0, 0x5605) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x4002, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 02:47:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:47:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff000000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0) 02:47:37 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r0, 0x5605) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x4002, 0x0) syz_read_part_table(0x0, 0x0, 0x0) 02:47:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2a000000) 02:47:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x0, 0xffffff95}) [ 526.851522][T15709] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 02:47:37 executing program 3: r0 = socket(0x18, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 02:47:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 527.155150][T15684] syz-executor.2: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 527.174616][ T26] audit: type=1800 audit(1644461257.898:923): pid=15686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1182 res=0 errno=0 [ 527.226429][T15715] selinux_netlink_send: 34 callbacks suppressed [ 527.226449][T15715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15715 comm=syz-executor.5 [ 527.246132][T15684] CPU: 0 PID: 15684 Comm: syz-executor.2 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef #0 [ 527.256652][T15684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.266728][T15684] Call Trace: [ 527.270018][T15684] [ 527.272954][T15684] dump_stack_lvl+0xcd/0x134 [ 527.277566][T15684] warn_alloc.cold+0x9b/0x189 [ 527.282259][T15684] ? zone_watermark_ok_safe+0x290/0x290 [ 527.287826][T15684] ? __vmalloc_node_range+0x7bf/0x1060 [ 527.293310][T15684] __vmalloc_node_range+0xe1e/0x1060 [ 527.298628][T15684] ? vfree_atomic+0xe0/0xe0 [ 527.303151][T15684] ? netlink_sendmsg+0x687/0xe00 [ 527.308116][T15684] vmalloc+0x67/0x80 [ 527.312037][T15684] ? netlink_sendmsg+0x687/0xe00 [ 527.316990][T15684] netlink_sendmsg+0x687/0xe00 [ 527.321764][T15684] ? netlink_unicast+0x7e0/0x7e0 [ 527.326715][T15684] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 527.332992][T15684] ? netlink_unicast+0x7e0/0x7e0 [ 527.337960][T15684] sock_sendmsg+0xcf/0x120 [ 527.342402][T15684] sock_no_sendpage+0xf6/0x140 [ 527.347186][T15684] ? sock_no_shutdown+0x10/0x10 [ 527.352053][T15684] ? filemap_read+0x8ff/0xb90 [ 527.356838][T15684] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 527.362578][T15684] ? ktime_get_coarse_real_ts64+0x15a/0x200 [ 527.368573][T15684] kernel_sendpage.part.0+0x1a0/0x340 [ 527.373963][T15684] sock_sendpage+0xe5/0x140 [ 527.378484][T15684] ? __sock_recv_ts_and_drops+0x430/0x430 [ 527.384220][T15684] pipe_to_sendpage+0x2ad/0x380 [ 527.389255][T15684] ? propagate_umount+0x19f0/0x19f0 [ 527.394463][T15684] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 527.400726][T15684] ? splice_from_pipe_next.part.0+0x167/0x520 [ 527.406804][T15684] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 527.413070][T15684] __splice_from_pipe+0x43e/0x8a0 [ 527.418112][T15684] ? propagate_umount+0x19f0/0x19f0 [ 527.423324][T15684] generic_splice_sendpage+0xd4/0x140 [ 527.428708][T15684] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 527.433831][T15684] ? security_file_permission+0xab/0xd0 [ 527.439441][T15684] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 527.444563][T15684] direct_splice_actor+0x110/0x180 [ 527.449691][T15684] splice_direct_to_actor+0x34b/0x8c0 [ 527.455076][T15684] ? generic_file_splice_read+0x6d0/0x6d0 [ 527.460809][T15684] ? do_splice_to+0x250/0x250 [ 527.465491][T15684] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 527.471747][T15684] ? security_file_permission+0xab/0xd0 [ 527.477307][T15684] do_splice_direct+0x1b3/0x280 [ 527.482165][T15684] ? splice_direct_to_actor+0x8c0/0x8c0 [ 527.487722][T15684] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 527.493982][T15684] ? security_file_permission+0xab/0xd0 [ 527.499541][T15684] do_sendfile+0xaf2/0x1250 [ 527.504113][T15684] ? do_pwritev+0x270/0x270 [ 527.508622][T15684] ? __context_tracking_exit+0xb8/0xe0 [ 527.514105][T15684] ? lock_downgrade+0x6e0/0x6e0 [ 527.518973][T15684] ? lock_downgrade+0x6e0/0x6e0 [ 527.523841][T15684] __x64_sys_sendfile64+0x1cc/0x210 [ 527.529053][T15684] ? __ia32_sys_sendfile+0x220/0x220 [ 527.534349][T15684] ? syscall_enter_from_user_mode+0x21/0x70 [ 527.540257][T15684] do_syscall_64+0x35/0xb0 [ 527.544689][T15684] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 527.550597][T15684] RIP: 0033:0x7fa34cda9059 [ 527.555016][T15684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 527.574632][T15684] RSP: 002b:00007fa34b71e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 527.583067][T15684] RAX: ffffffffffffffda RBX: 00007fa34cebbf60 RCX: 00007fa34cda9059 [ 527.591043][T15684] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 527.599014][T15684] RBP: 00007fa34ce0308d R08: 0000000000000000 R09: 0000000000000000 [ 527.606986][T15684] R10: 0000000061c2c9d9 R11: 0000000000000246 R12: 0000000000000000 [ 527.614965][T15684] R13: 00007ffd8c93cd5f R14: 00007fa34b71e300 R15: 0000000000022000 [ 527.622946][T15684] [ 527.696016][ T26] audit: type=1400 audit(1644461257.968:924): avc: denied { read } for pid=15713 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 527.910667][T15684] Mem-Info: [ 527.937583][T15684] active_anon:696 inactive_anon:154111 isolated_anon:0 [ 527.937583][T15684] active_file:6446 inactive_file:7386 isolated_file:0 [ 527.937583][T15684] unevictable:768 dirty:71 writeback:0 [ 527.937583][T15684] slab_reclaimable:18186 slab_unreclaimable:131495 [ 527.937583][T15684] mapped:28070 shmem:2267 pagetables:755 bounce:0 [ 527.937583][T15684] kernel_misc_reclaimable:0 [ 527.937583][T15684] free:1279341 free_pcp:9731 free_cma:0 [ 527.995518][T15684] Node 0 active_anon:2776kB inactive_anon:615512kB active_file:25708kB inactive_file:29544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112280kB dirty:280kB writeback:0kB shmem:6592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 536576kB writeback_tmp:0kB kernel_stack:10416kB pagetables:3012kB all_unreclaimable? no [ 528.053114][T15684] Node 1 active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:8kB all_unreclaimable? no [ 528.128204][T15684] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.159157][T15684] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 528.179286][T15684] Node 0 DMA32 free:1151772kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:2776kB inactive_anon:615512kB active_file:25708kB inactive_file:29544kB unevictable:1536kB writepending:280kB present:3129332kB managed:2716692kB mlocked:0kB bounce:0kB free_pcp:39432kB local_pcp:19356kB free_cma:0kB [ 528.228533][T15684] lowmem_reserve[]: 0 0 0 0 0 [ 528.239978][T15684] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.268229][T15684] lowmem_reserve[]: 0 0 0 0 0 [ 528.274574][T15684] Node 1 Normal free:3948496kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.304575][T15684] lowmem_reserve[]: 0 0 0 0 0 [ 528.323714][T15684] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 528.342525][T15684] Node 0 DMA32: 1903*4kB (ME) 2511*8kB (ME) 1527*16kB (UME) 862*32kB (UME) 415*64kB (UME) 154*128kB (UME) 48*256kB (UME) 27*512kB (UME) 14*1024kB (UME) 5*2048kB (UME) 238*4096kB (UM) = 1151524kB [ 528.362151][T15684] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 528.374080][T15684] Node 1 Normal: 106*4kB (UME) 199*8kB (UME) 137*16kB (UME) 83*32kB (UM) 50*64kB (U) 43*128kB (UME) 11*256kB (UE) 6*512kB (UE) 1*1024kB (U) 3*2048kB (UM) 957*4096kB (M) = 3948496kB [ 528.393353][T15684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 528.404216][T15684] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 528.419610][T15684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 528.430563][T15684] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 528.441591][T15684] 16099 total pagecache pages [ 528.447560][T15684] 0 pages in swap cache [ 528.451792][T15684] Swap cache stats: add 0, delete 0, find 0/0 [ 528.459179][T15684] Free swap = 0kB [ 528.470387][T15684] Total swap = 0kB [ 528.474216][T15684] 2097051 pages RAM 02:47:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000580)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="354c1667b302", 0x0, 0x0, 0x0, 0x0, 0x0}) 02:47:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:39 executing program 4: pipe(&(0x7f0000002640)={0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x7) 02:47:39 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 02:47:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2c000000) 02:47:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000010c40)='./cgroup/syz0\x00', 0x200002, 0x0) [ 528.480890][T15684] 0 pages HighMem/MovableOnly [ 528.490990][T15684] 384533 pages reserved [ 528.497925][T15684] 0 pages cma reserved [ 528.528307][T15723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15723 comm=syz-executor.5 02:47:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x30}}, 0x0) 02:47:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x2c}}, 0x0) 02:47:39 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x16}]}) [ 528.618419][T15723] __nla_validate_parse: 3 callbacks suppressed [ 528.618436][T15723] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:39 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) 02:47:39 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000280)=@can={{}, 0x0, 0x0, 0x0, 0x0, "070000591000"}, 0x10}}, 0x20008c4) [ 528.793237][T15739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15739 comm=syz-executor.5 02:47:39 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) recvmsg$can_raw(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x40010083) 02:47:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2d000000) [ 528.866062][ T26] audit: type=1326 audit(1644461259.588:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15737 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f424c75e059 code=0x0 [ 529.025205][T15748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15748 comm=syz-executor.5 [ 529.063530][T15748] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 529.144849][T15748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15748 comm=syz-executor.5 02:47:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000f217000000100025800c000180080001000000000008000300", @ANYRES32=r3], 0x2c}}, 0x0) 02:47:40 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0) 02:47:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080)={0x0, 0x1920}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000b00)={&(0x7f0000000b40)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000a40)=[@dstaddrv6={0x1c, 0x84, 0xa, @empty}, @sndrcv={0x2c}], 0x48}, 0x0) 02:47:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}}, 0x0) 02:47:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2e000000) [ 529.399117][ T26] audit: type=1800 audit(1644461260.118:926): pid=15731 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1182 res=0 errno=0 02:47:40 executing program 0: openat$ptmx(0xffffff9c, &(0x7f0000000140), 0x40000, 0x0) [ 529.464395][T15755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15755 comm=syz-executor.5 02:47:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}}, 0x0) 02:47:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000082b0000000a0001007770612730"], 0x20}}, 0x0) 02:47:40 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{}, 0x10, 0x0, 0x0, 0x0, "2f69baa69d6d1607"}, 0x10}}, 0x0) [ 529.533591][T15755] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:40 executing program 4: r0 = socket(0x2, 0xa, 0x0) recvmsg$can_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40010000) 02:47:40 executing program 0: r0 = socket(0x2b, 0x1, 0x0) recvmsg$can_raw(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) [ 529.655557][T15769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15769 comm=syz-executor.5 [ 529.787174][ T26] audit: type=1400 audit(1644461260.508:927): avc: denied { read } for pid=15770 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 02:47:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:40 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r0, 0xa6d7fa08f0dcf757, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 02:47:40 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "2f69baa69d6d1607"}, 0x10}}, 0x4008040) 02:47:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x30000000) 02:47:40 executing program 0: r0 = socket(0x2b, 0x1, 0x0) getpeername$llc(r0, 0x0, 0x0) 02:47:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x99, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}}, 0x0) [ 530.220444][ T26] audit: type=1804 audit(1644461260.938:928): pid=15776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/720/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 02:47:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x0) 02:47:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0xb870d660a710d16d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}]}, 0x28}}, 0x0) [ 530.290150][T15786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15786 comm=syz-executor.5 02:47:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) 02:47:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x0) [ 530.349735][T15786] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 530.464612][T15790] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 02:47:41 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000001c0)=0x4, 0x4) bind$can_raw(r0, &(0x7f0000000180), 0x10) 02:47:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}}, 0x0) [ 530.508235][T15786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15786 comm=syz-executor.5 [ 530.610819][ T26] audit: type=1400 audit(1644461261.328:929): avc: denied { setopt } for pid=15798 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 530.662813][ T26] audit: type=1400 audit(1644461261.348:930): avc: denied { bind } for pid=15798 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 02:47:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:41 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, '\a\x00'}, 0x10}}, 0x0) 02:47:41 executing program 0: r0 = socket$inet(0x2, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}}}) 02:47:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x31000000) 02:47:41 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r0, 0xa6d7fa08f0dcf757}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) 02:47:41 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000140), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "2f69baa69d6d1607"}, 0x10}}, 0x0) [ 530.826794][T15808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15808 comm=syz-executor.5 02:47:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x1, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8}]}, 0x24}}, 0x0) 02:47:41 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) recvmsg$can_raw(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{}, 0x0, 0x0, 0x0, 0x0, "2f69baa69d6d1607"}, 0x10}}, 0x0) 02:47:41 executing program 2: mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x7) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) socket$unix(0x1, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001780), 0x0, 0x0) pipe2$9p(0x0, 0x0) io_submit(0x0, 0x4, &(0x7f0000001900)=[0x0, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x8, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, &(0x7f0000001840), 0x0, 0x0, 0x0, 0x1}]) 02:47:41 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0) [ 530.909948][T15808] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="040004"], 0x20}}, 0x0) [ 530.995388][ T26] audit: type=1400 audit(1644461261.718:931): avc: denied { read } for pid=15818 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 02:47:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}}, 0x0) 02:47:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}}, 0x0) 02:47:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x32000000) 02:47:41 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r1, r0, 0x0, 0x100000002) 02:47:41 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0, 0x0) 02:47:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x158, 0x258, 0x158, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@mh={{0x28}, {"4b95"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1}}}, {{@ipv6={@mcast1, @local, [], [], 'ip6erspan0\x00', 'macsec0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 02:47:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x38}}, 0x0) [ 531.250079][T15838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 531.334645][T15843] x_tables: duplicate underflow at hook 2 02:47:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x0) 02:47:42 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 02:47:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x99, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}}, 0x0) 02:47:42 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r1, r0, 0x0, 0x100000002) 02:47:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x33000000) 02:47:42 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getpeername$packet(r0, 0x0, &(0x7f0000000080)) [ 531.847639][T15853] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:42 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r1, r0, 0x0, 0x100000002) 02:47:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x24, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x4c}}, 0x0) 02:47:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xff01, &(0x7f00000007c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX, @NL802154_ATTR_WPAN_DEV, @NL802154_ATTR_IFINDEX]}, 0x14}}, 0x0) 02:47:42 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x24, r0, 0xa6d7fa08f0dcf757, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 02:47:42 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) 02:47:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x34000000) 02:47:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x1c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}]}]}, 0x38}}, 0x0) 02:47:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x14, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x3c}}, 0x0) 02:47:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000f217000000100025b10000b6d9f53801000000000008000300", @ANYRES32=r3], 0x2c}}, 0x0) 02:47:42 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)) 02:47:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 532.136795][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:42 executing program 2: r0 = socket(0x18, 0x0, 0x0) connect$x25(r0, 0x0, 0x0) 02:47:43 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r0, 0xa6d7fa08f0dcf757}, 0x14}}, 0x0) 02:47:43 executing program 4: r0 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) [ 532.245995][T15875] selinux_netlink_send: 6 callbacks suppressed [ 532.246015][T15875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15875 comm=syz-executor.5 02:47:43 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000480)}) 02:47:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x36010000) 02:47:43 executing program 2: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0xc200) 02:47:43 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ad39cf00003200fe8000000000000000000000000000aa44"], 0x0) 02:47:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x1c, r1, 0xa6d7fa08f0dcf757, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) 02:47:43 executing program 2: r0 = socket(0x2, 0x5, 0x0) recvmsg$can_raw(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 02:47:43 executing program 0: shmget$private(0x0, 0xc000, 0x800, &(0x7f0000ff2000/0xc000)=nil) [ 532.489089][T15900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15900 comm=syz-executor.5 02:47:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x4}}, 0x10) 02:47:43 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8922, &(0x7f0000000000)={'erspan0\x00'}) [ 532.559304][T15900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000007"], &(0x7f0000000240)=""/240, 0x26, 0xf0, 0x1}, 0x20) 02:47:43 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) read$FUSE(r0, 0x0, 0x0) 02:47:43 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)) [ 532.693381][T15915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15915 comm=syz-executor.5 [ 532.693590][T15916] erspan0: mtu less than device minimum 02:47:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x3a000000) 02:47:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:43 executing program 2: pselect6(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0x100000000]}, 0x8}) 02:47:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x80044dff, &(0x7f00000000c0)) 02:47:43 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x891d, &(0x7f0000000000)={'erspan0\x00'}) 02:47:43 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1}, 0x50) write$FUSE_CREATE_OPEN(r0, &(0x7f00000022c0)={0xa0, 0x0, r1}, 0xa0) 02:47:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:43 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 02:47:43 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 02:47:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x80044dff, &(0x7f00000000c0)) [ 532.938897][T15932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15932 comm=syz-executor.5 02:47:43 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0xc0}, 0x0) 02:47:43 executing program 2: r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) [ 533.032460][T15932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x3e000000) 02:47:43 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 02:47:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x80044dff, &(0x7f00000000c0)) 02:47:43 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pselect6(0x40, &(0x7f00000012c0), 0x0, &(0x7f0000001340)={0x23}, 0x0, 0x0) [ 533.159565][T15946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15946 comm=syz-executor.5 02:47:43 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000006cc0)=ANY=[@ANYBLOB="90040000", @ANYRES64], 0x490) 02:47:44 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8983, &(0x7f0000000000)={'erspan0\x00'}) 02:47:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x80044dff, &(0x7f00000000c0)) [ 533.298208][T15958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15958 comm=syz-executor.5 02:47:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:44 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8903, 0x0) 02:47:44 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) 02:47:44 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) fadvise64(r0, 0x0, 0xfffffffffffff801, 0x0) [ 533.443393][T15958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15958 comm=syz-executor.5 02:47:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x42000000) 02:47:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:44 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 02:47:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000000)) [ 533.628629][T15981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15981 comm=syz-executor.5 [ 533.666839][T15981] __nla_validate_parse: 1 callbacks suppressed [ 533.666858][T15981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 533.735737][T15981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15981 comm=syz-executor.5 02:47:44 executing program 2: ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) 02:47:44 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x0) read$FUSE(r0, 0x0, 0x0) 02:47:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa}, 0x48) 02:47:44 executing program 0: clock_gettime(0x0, &(0x7f0000000240)={0x0}) pselect6(0x40, &(0x7f0000000180)={0x401}, &(0x7f00000001c0)={0x1}, &(0x7f0000000200)={0xe82}, &(0x7f0000000280)={r0}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x100000000]}, 0x8}) 02:47:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x43000000) 02:47:44 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pselect6(0x40, &(0x7f00000012c0), &(0x7f0000001300)={0x2}, &(0x7f0000001340)={0x23}, 0x0, 0x0) [ 534.104326][T15987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15987 comm=syz-executor.5 02:47:44 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8983, 0x0) 02:47:44 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) 02:47:44 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) clock_gettime(0x5, &(0x7f0000000040)) [ 534.204716][T15987] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:45 executing program 3: prlimit64(0x0, 0x9, &(0x7f0000000000)={0x0, 0x100000000}, 0x0) 02:47:45 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 02:47:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:45 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) shmdt(0x0) 02:47:45 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) 02:47:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x1f, 0xf6, 0x3, 0x14, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x7, 0x3f, 0x3}}) 02:47:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x48000000) [ 534.446369][ T26] audit: type=1400 audit(1644461265.168:932): avc: denied { ioctl } for pid=16010 comm="syz-executor.0" path="ipc:[4026532853]" dev="nsfs" ino=4026532853 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 02:47:45 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x4000c0, 0x0) 02:47:45 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) 02:47:45 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) 02:47:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 02:47:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:45 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x1407, 0x8, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000818}, 0x24000840) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000000)={'wg0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="0c000000e2ffffff18000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000"]) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f00000001c0)=0x3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000000c0)) [ 534.566510][T16021] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:45 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040), 0x10) 02:47:45 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8929, &(0x7f0000000000)={'erspan0\x00'}) 02:47:45 executing program 3: alarm(0xfff) 02:47:45 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x4020940d, 0x0) 02:47:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x49000000) 02:47:45 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:47:45 executing program 0: socket(0x0, 0x2, 0x89) 02:47:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}]}}, &(0x7f0000000240)=""/240, 0x26, 0xf0, 0x1}, 0x20) [ 534.827168][T16043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:45 executing program 4: mq_open(&(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0, 0x0) 02:47:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 534.897950][T16049] dlm: non-version read from control device 0 02:47:45 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000380)) 02:47:45 executing program 2: clock_gettime(0x0, &(0x7f0000000240)={0x0}) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x1}, 0x0, &(0x7f0000000280)={r0}, 0x0) 02:47:45 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) 02:47:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4a000000) 02:47:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0xffffffffffffffdf) 02:47:45 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d09, 0x0) 02:47:45 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 02:47:45 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d02, &(0x7f0000000000)) [ 535.132101][T16066] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 02:47:45 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40) 02:47:45 executing program 2: prlimit64(0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)) 02:47:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:46 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xfffffeff) 02:47:46 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000080)={0x2, 0x7}, &(0x7f00000000c0)) 02:47:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4c000000) 02:47:46 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 02:47:46 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000240)=""/240, 0x26, 0xf0, 0x1}, 0x20) [ 535.842747][ T26] audit: type=1804 audit(1644461266.558:933): pid=16065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/739/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 02:47:46 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000140)={0x23, 0x0, 0x3}, 0x10) [ 535.906749][T16091] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:46 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x89a1, &(0x7f0000000040)={'syzkaller1\x00'}) 02:47:46 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000006200)={0x10}, 0x10) 02:47:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', 0x0}) [ 536.049559][ T26] audit: type=1400 audit(1644461266.768:934): avc: denied { bind } for pid=16095 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 02:47:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4e000000) 02:47:46 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) [ 536.214540][T16104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:47 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x2) 02:47:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 02:47:47 executing program 3: openat$dsp(0xffffffffffffff9c, 0x0, 0x940, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) 02:47:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4f000000) 02:47:47 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6ec42aea4800f8c7) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) [ 536.798126][ T26] audit: type=1804 audit(1644461267.518:935): pid=16114 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/740/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 02:47:47 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 02:47:47 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x2) 02:47:47 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) fallocate(r0, 0x50, 0x0, 0x9) [ 536.868808][T16122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:47 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0) 02:47:47 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fallocate(r0, 0x2, 0x0, 0x80000000) 02:47:47 executing program 4: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x401}, &(0x7f00000001c0), 0x0, &(0x7f0000000280)={0x0, r0+10000000}, 0x0) 02:47:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x50000000) 02:47:48 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x2) 02:47:48 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc000000000000000}}, 0x0) 02:47:48 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1000) 02:47:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:48 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 537.597033][ T26] audit: type=1804 audit(1644461268.318:936): pid=16142 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/741/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 02:47:48 executing program 3: syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x42003) 02:47:48 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 537.666901][T16150] selinux_netlink_send: 13 callbacks suppressed [ 537.666921][T16150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16150 comm=syz-executor.5 02:47:48 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0xc0189436, &(0x7f0000000000)={'erspan0\x00'}) 02:47:48 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x2) 02:47:48 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) [ 537.775542][T16150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:48 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x2, &(0x7f0000000000)={'erspan0\x00'}) [ 537.954185][T16164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16164 comm=syz-executor.5 02:47:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x51000000) 02:47:48 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 02:47:48 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mq_notify(r0, &(0x7f0000000000)={0x0, 0x0, 0x1}) 02:47:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000240)=""/240, 0x0, 0xf0}, 0x20) [ 538.098950][ T26] audit: type=1400 audit(1644461268.818:937): avc: denied { write } for pid=16168 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 538.115204][T16175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16175 comm=syz-executor.5 [ 538.157201][T16175] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 538.243536][T16175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16175 comm=syz-executor.5 02:47:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:49 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf0ff7f00000000}}, 0x0) 02:47:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8943, &(0x7f0000000000)={'erspan0\x00'}) 02:47:49 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x5452, &(0x7f0000000000)={'erspan0\x00'}) 02:47:49 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) 02:47:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x52000000) [ 538.627826][ T26] audit: type=1804 audit(1644461269.348:938): pid=16179 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/742/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 02:47:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 02:47:49 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xe00) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 02:47:49 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8970, &(0x7f0000000000)={'erspan0\x00'}) [ 538.706690][ T26] audit: type=1400 audit(1644461269.428:939): avc: denied { write } for pid=16184 comm="syz-executor.3" name="nullb0" dev="devtmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 538.736916][T16189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16189 comm=syz-executor.5 02:47:49 executing program 4: shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) [ 538.806261][T16189] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 538.808984][ T26] audit: type=1400 audit(1644461269.528:940): avc: denied { append } for pid=16193 comm="syz-executor.0" name="nbd0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 02:47:49 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x1) fallocate(r0, 0x10, 0x0, 0x3) 02:47:49 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0xc020660b, 0x0) [ 539.000763][T16200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16200 comm=syz-executor.5 02:47:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:50 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002240)=ANY=[], 0x348) 02:47:50 executing program 0: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x6ec42aea4800f8c7) 02:47:50 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, 0x0) 02:47:50 executing program 4: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x189080) 02:47:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x54000000) [ 539.496728][ T26] audit: type=1804 audit(1644461270.218:941): pid=16207 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/743/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 02:47:50 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000000)={'erspan0\x00'}) [ 539.563260][T16214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16214 comm=syz-executor.5 02:47:50 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r0, 0x0, 0x0, 0x40003020, 0x0, 0x0) 02:47:50 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 02:47:50 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, &(0x7f0000000000)={'erspan0\x00'}) [ 539.618182][T16214] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 539.704473][ T26] audit: type=1400 audit(1644461270.418:942): avc: denied { read } for pid=16221 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 02:47:50 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f0000000080)=""/199, 0x2a, 0xc7, 0x1}, 0x20) 02:47:50 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000000)) [ 539.865585][T16227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16227 comm=syz-executor.5 02:47:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:51 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 02:47:51 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00') 02:47:51 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x5421, &(0x7f00000000c0)) 02:47:51 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8971, &(0x7f0000000000)={'erspan0\x00'}) 02:47:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x55000000) 02:47:51 executing program 2: r0 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r0) 02:47:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 02:47:51 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8911, &(0x7f0000000000)={'erspan0\x00'}) [ 540.426280][T16243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16243 comm=syz-executor.5 02:47:51 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8980, &(0x7f0000000000)={'wg0\x00'}) [ 540.495679][T16243] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:51 executing program 2: socket$inet(0x2, 0x3, 0x47) 02:47:51 executing program 0: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00') [ 540.644670][T16256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16256 comm=syz-executor.5 02:47:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:51 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0) 02:47:51 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000080), 0x0) 02:47:51 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8930, &(0x7f0000000000)={'erspan0\x00'}) 02:47:51 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'rose0\x00'}) 02:47:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x56000000) 02:47:51 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/240, 0x1a, 0xf0, 0x1}, 0x20) 02:47:51 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x5460, 0x0) 02:47:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @loopback}}}) [ 540.976828][T16271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:51 executing program 4: syz_open_dev$vcsa(&(0x7f0000000500), 0x7, 0x260001) 02:47:51 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x9effffff00000000}}, 0x0) 02:47:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x58000000) 02:47:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:52 executing program 3: syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x8240) 02:47:52 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8901, &(0x7f0000000000)={'erspan0\x00'}) 02:47:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x248201, 0x0) fcntl$getownex(r0, 0x10, 0x0) 02:47:52 executing program 0: socket(0x0, 0x1001, 0x0) [ 541.273669][T16291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:52 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fallocate(r0, 0x0, 0xfffffffffffffff7, 0x0) 02:47:52 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='keyring\x00', 0x0, &(0x7f0000000100)='\t', 0x1, r0) 02:47:52 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x348) 02:47:52 executing program 0: mq_open(&(0x7f00000000c0)='erspan0\x00', 0x0, 0x0, 0x0) 02:47:52 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x894c, 0x0) 02:47:52 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000000)={'erspan0\x00'}) 02:47:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x59000000) 02:47:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:52 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800d8c7) 02:47:52 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 02:47:52 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ata_eh_link_autopsy\x00', r0}, 0x10) 02:47:52 executing program 2: pselect6(0x40, &(0x7f0000000180)={0x401}, &(0x7f00000001c0)={0x1}, &(0x7f0000000200)={0xe82}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0x100000000]}, 0x8}) [ 541.631761][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:52 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x5421, &(0x7f0000000000)={'erspan0\x00'}) 02:47:52 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000900000007006e53f6ce000a"], &(0x7f00000001c0)=""/4096, 0x39, 0x1000, 0x1}, 0x20) [ 541.743046][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 541.743063][ T26] audit: type=1804 audit(1644461272.458:944): pid=16322 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/748/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 02:47:52 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000000)=0x90) 02:47:52 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0x58}, 0x2400881b) 02:47:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5a000000) 02:47:52 executing program 0: mq_open(&(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0, 0x0) 02:47:52 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:47:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:52 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/mnt\x00') 02:47:52 executing program 4: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) 02:47:52 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x5421, 0x0) [ 541.979049][T16343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 542.007531][ T26] audit: type=1400 audit(1644461272.728:945): avc: denied { write } for pid=2946 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 02:47:52 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) 02:47:52 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000000)) 02:47:52 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0xb}]}}, &(0x7f0000000240)=""/240, 0x26, 0xf0, 0x1}, 0x20) 02:47:52 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000001c0)) [ 542.114406][ T26] audit: type=1400 audit(1644461272.728:946): avc: denied { remove_name } for pid=2946 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 02:47:52 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 02:47:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5c000000) 02:47:53 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 02:47:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) [ 542.221925][ T26] audit: type=1400 audit(1644461272.728:947): avc: denied { add_name } for pid=2946 comm="syslogd" name="messages.0" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.343191][T16368] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 542.375927][ T26] audit: type=1804 audit(1644461273.018:948): pid=16364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/749/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 02:47:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:53 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8993, &(0x7f0000000000)={'erspan0\x00'}) 02:47:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00'}) 02:47:53 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000000)={'erspan0\x00'}) 02:47:53 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="012603f49722e687b1"]) 02:47:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5e000000) 02:47:53 executing program 3: r0 = socket$inet(0x2, 0x3, 0x47) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) 02:47:53 executing program 0: socket(0x5eb3dd03bfaf8c9e, 0x0, 0x0) 02:47:53 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000)='=', 0x1, 0xc0, 0x0, 0x0) [ 542.587427][T16380] autofs4:pid:16380:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4093847041.2280006295), cmd(0xc018937a) [ 542.626556][T16383] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 542.651824][T16380] autofs4:pid:16380:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937a) 02:47:53 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8981, &(0x7f0000000000)={'wg0\x00'}) [ 542.703958][ T26] audit: type=1400 audit(1644461273.418:949): avc: denied { write } for pid=16389 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 02:47:53 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd(r0, &(0x7f00000001c0), 0x8) 02:47:53 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000001400)) [ 542.795641][ T26] audit: type=1804 audit(1644461273.498:950): pid=16385 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/750/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 [ 542.835088][T16394] selinux_netlink_send: 11 callbacks suppressed [ 542.835110][T16394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16394 comm=syz-executor.5 02:47:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:53 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf00}}, 0x0) 02:47:53 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x80000000) 02:47:53 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1}, 0x50) 02:47:53 executing program 4: pselect6(0x40, &(0x7f0000000780), 0x0, 0x0, &(0x7f0000002500), 0x0) 02:47:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5f000000) 02:47:53 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 02:47:53 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8921, &(0x7f0000000000)={'erspan0\x00'}) [ 543.136331][T16410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16410 comm=syz-executor.5 02:47:53 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1ccdf3db3e14000328bc7c00dbde25090006efa43f020073797a310000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2004a055}, 0x10) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x9000, 0x200, &(0x7f0000ff7000/0x9000)=nil) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x940, 0x0) 02:47:53 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)=ANY=[]) [ 543.209879][T16410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:54 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 02:47:54 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x80044d76, &(0x7f00000000c0)) [ 543.309799][ T26] audit: type=1804 audit(1644461274.028:951): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/751/cgroup.controllers" dev="sda1" ino=1166 res=1 errno=0 [ 543.459422][T16423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16423 comm=syz-executor.5 02:47:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:54 executing program 3: clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000180)={0x401}, 0x0, &(0x7f0000000200)={0xe82}, 0x0, 0x0) 02:47:54 executing program 0: socket(0xa, 0x0, 0xdf6) 02:47:54 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x6ec42aea4800f8c7) 02:47:54 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x7}, 0x0) 02:47:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x60000000) 02:47:54 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x70}}, 0x0) 02:47:54 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000080)}) 02:47:54 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x9effffff}}, 0x0) 02:47:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d03, &(0x7f00000000c0)=0x2d) [ 543.655064][T16432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16432 comm=syz-executor.5 02:47:54 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) 02:47:54 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)) [ 543.819873][T16432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16432 comm=syz-executor.5 [ 543.846582][ T26] audit: type=1804 audit(1644461274.568:952): pid=16444 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/752/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 02:47:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x80044d76, 0x0) 02:47:54 executing program 0: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 02:47:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x64000000) 02:47:54 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) 02:47:54 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xfffffeff) 02:47:54 executing program 2: pselect6(0x40, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) [ 544.091251][T16463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16463 comm=syz-executor.5 02:47:54 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8906, 0x0) 02:47:54 executing program 4: shmget$private(0x0, 0x2000, 0x78000a5b, &(0x7f0000ffa000/0x2000)=nil) [ 544.137336][T16463] __nla_validate_parse: 1 callbacks suppressed [ 544.137353][T16463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:54 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x1ada4c1ea199d6ca) 02:47:55 executing program 3: pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x1}, 0x0, 0x0, 0x0) 02:47:55 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x43ec01, 0x0) [ 544.271926][ T26] audit: type=1804 audit(1644461274.988:953): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/753/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 544.302291][T16475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16475 comm=syz-executor.5 02:47:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:55 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 02:47:55 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pselect6(0x40, &(0x7f00000012c0), 0x0, &(0x7f0000001340)={0x23}, &(0x7f0000001380)={0x77359400}, 0x0) 02:47:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x65000000) 02:47:55 executing program 3: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmdt(r0) [ 544.515716][T16487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16487 comm=syz-executor.5 02:47:55 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x80044dfd, &(0x7f00000000c0)) [ 544.556119][T16487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 544.660055][T16493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16493 comm=syz-executor.5 02:47:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x200140, 0x0) signalfd(r0, &(0x7f0000000040), 0x8) 02:47:55 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x89a1, &(0x7f0000000000)={'wg0\x00'}) 02:47:55 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x4f1970a351e52392, 0x0) 02:47:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x65580000) 02:47:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:55 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) 02:47:55 executing program 3: syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0xe000) 02:47:55 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) [ 545.103150][T16502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16502 comm=syz-executor.5 [ 545.127625][T16502] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:56 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) 02:47:56 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 02:47:56 executing program 4: socket(0xa, 0x3, 0x7) 02:47:56 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x801) 02:47:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x66000000) 02:47:56 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="10f5"], 0x10}}, 0x0) 02:47:56 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, 0x0}) 02:47:56 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x4}) 02:47:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:56 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x4020940d, &(0x7f0000000000)={'erspan0\x00'}) [ 545.520066][T16527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:56 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0xf}, 0x0) 02:47:56 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x0) 02:47:56 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 02:47:56 executing program 0: recvfrom$phonet(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 02:47:56 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000007200)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000006cc0)=ANY=[@ANYBLOB="90040000", @ANYRES64], 0x490) 02:47:56 executing program 2: mq_open(&(0x7f0000000080)='\x00', 0x0, 0x0, 0x0) 02:47:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x68000000) 02:47:56 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000140), 0x10) 02:47:56 executing program 0: pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000002180)={0x95a2}, 0x0, 0x0) 02:47:56 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000240)=""/240, 0x26, 0xf0, 0x1}, 0x20) [ 545.861442][T16553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:56 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8924, &(0x7f0000000000)={'erspan0\x00'}) 02:47:56 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000000)) 02:47:56 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x1d, 0x0, 0x0) 02:47:56 executing program 4: socket(0x18, 0x0, 0x89) 02:47:56 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8940, &(0x7f0000000000)={'erspan0\x00'}) 02:47:56 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 02:47:56 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 02:47:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x69000000) 02:47:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)) 02:47:56 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x40049409, 0x0) 02:47:56 executing program 2: socket(0x28, 0x0, 0x800) [ 546.212001][T16582] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:57 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x5452, &(0x7f00000000c0)=0x2) 02:47:57 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f00000022c0)={0xa0, 0x0, r1}, 0xa0) 02:47:57 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8980, &(0x7f0000000000)={'erspan0\x00'}) 02:47:57 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8903, &(0x7f0000000000)={'erspan0\x00'}) 02:47:57 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x111140, 0x0) 02:47:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6a000000) 02:47:57 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x6000, 0x0) 02:47:57 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x86c80) 02:47:57 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x5452, 0x0) 02:47:57 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x891e, &(0x7f0000000000)={'erspan0\x00'}) [ 546.552145][T16605] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:57 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0xc000}, 0x0) 02:47:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:57 executing program 4: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) 02:47:57 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fallocate(r0, 0x1a, 0x0, 0x8000) 02:47:57 executing program 2: socket$inet(0x2, 0x8000e, 0x0) 02:47:57 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x80044dfd, 0x0) 02:47:57 executing program 4: setfsuid(0xee00) syz_open_dev$vcsu(&(0x7f00000020c0), 0x0, 0x0) 02:47:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6c000000) 02:47:57 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, 0x0) 02:47:57 executing program 2: bind$phonet(0xffffffffffffffff, 0x0, 0x0) 02:47:57 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8946, &(0x7f0000000000)={'erspan0\x00'}) [ 546.921699][T16633] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 546.952335][ T26] kauditd_printk_skb: 7 callbacks suppressed 02:47:57 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 02:47:57 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) [ 546.952350][ T26] audit: type=1804 audit(1644461277.668:961): pid=16626 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/759/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 02:47:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:58 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8910, &(0x7f0000000000)={'erspan0\x00'}) 02:47:58 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f00000020c0)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee01}}}}, 0xa0) 02:47:58 executing program 0: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, r0+10000000}, 0x0) 02:47:58 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 02:47:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6d000000) 02:47:58 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) [ 547.367319][T16651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:58 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0xc4) 02:47:58 executing program 3: syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x6401) 02:47:58 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8981, 0x0) 02:47:58 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 02:47:58 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8981, &(0x7f0000000000)={'erspan0\x00'}) [ 547.574201][ T26] audit: type=1804 audit(1644461278.288:962): pid=16658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/760/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 02:47:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:58 executing program 4: openat$audio1(0xffffffffffffff9c, &(0x7f00000002c0), 0x401, 0x0) 02:47:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x70000000) 02:47:58 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) 02:47:58 executing program 0: shmget$private(0x0, 0x1000, 0xa9368bb5f6a49ac8, &(0x7f0000ffd000/0x1000)=nil) 02:47:58 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000000)) 02:47:58 executing program 3: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmdt(r0) [ 547.849460][T16681] selinux_netlink_send: 13 callbacks suppressed [ 547.849478][T16681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16681 comm=syz-executor.5 02:47:58 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8923, &(0x7f0000000000)={'erspan0\x00'}) 02:47:58 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10}, 0x10) 02:47:58 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/user\x00') [ 547.906496][T16684] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000400), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000440)) 02:47:58 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x583, 0x0) fallocate(r0, 0x40, 0x0, 0x401) [ 548.024658][ T26] audit: type=1804 audit(1644461278.738:963): pid=16683 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/761/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 548.143181][T16681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16681 comm=syz-executor.5 02:47:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:59 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f0000000080)) 02:47:59 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 02:47:59 executing program 4: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xfffffeff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 02:47:59 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fallocate(r0, 0x30, 0x0, 0x1) 02:47:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x71000000) 02:47:59 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x1407, 0x8, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000818}, 0x24000840) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000000)={'wg0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="0c000000e2ffffff18000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000"]) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f00000001c0)=0x3) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000000c0)) 02:47:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8}, 0x48) [ 548.312680][T16708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16708 comm=syz-executor.5 [ 548.336372][ T26] audit: type=1400 audit(1644461279.058:964): avc: denied { getopt } for pid=16705 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 02:47:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @loopback}}}) 02:47:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 02:47:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) 02:47:59 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x80044dff, 0x0) [ 548.494818][T16711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16711 comm=syz-executor.5 [ 548.557589][ T26] audit: type=1804 audit(1644461279.278:965): pid=16712 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/762/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 02:47:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:59 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 02:47:59 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) 02:47:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x72000000) 02:47:59 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) 02:47:59 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 02:47:59 executing program 0: openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/pid\x00') 02:47:59 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800d8c7) shmat(0x0, &(0x7f0000ff9000/0x2000)=nil, 0x7000) [ 548.798527][T16734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16734 comm=syz-executor.5 02:47:59 executing program 4: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6ec42aea4800e8c7) r0 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmdt(r0) 02:47:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 02:47:59 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) [ 548.940331][T16736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16736 comm=syz-executor.5 02:47:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x74000000) [ 549.003530][ T26] audit: type=1804 audit(1644461279.718:966): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/763/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 549.141137][T16752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16752 comm=syz-executor.5 [ 549.164419][T16752] __nla_validate_parse: 2 callbacks suppressed [ 549.164437][T16752] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:47:59 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 02:47:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x0, 0x0, 0x0, 0x1d2d, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 02:47:59 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000002180), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x1bac) 02:47:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:47:59 executing program 2: clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, &(0x7f00000001c0)={0x1}, &(0x7f0000000200)={0xe82, 0x10001, 0x800}, &(0x7f0000000280)={r0, r1+10000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x100000000]}, 0x8}) [ 549.239157][T16752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16752 comm=syz-executor.5 02:48:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x75000000) 02:48:00 executing program 4: socket$inet(0x2, 0xa, 0x3) 02:48:00 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) 02:48:00 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0}) 02:48:00 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x5451, 0x0) 02:48:00 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)) 02:48:00 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'nr0\x00', 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x10000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', r1, r2, 0x3, 0x2, 0x3}, 0x48) [ 549.396558][T16765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16765 comm=syz-executor.5 02:48:00 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001100)={'wlan1\x00'}) [ 549.460292][ T26] audit: type=1804 audit(1644461280.178:967): pid=16766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/764/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0 [ 549.470596][T16765] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x4e800) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000280)) [ 549.584439][ T26] audit: type=1400 audit(1644461280.298:968): avc: denied { ioctl } for pid=16779 comm="syz-executor.2" path="socket:[77994]" dev="sockfs" ino=77994 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 02:48:00 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xad0000, &(0x7f0000000140)={0x0, 0x3938700}) 02:48:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={0x0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:00 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller1\x00'}) [ 549.679306][T16783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16783 comm=syz-executor.5 02:48:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x76000000) 02:48:00 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000080)={0x2}, 0x0) 02:48:00 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8947, &(0x7f0000000000)={'erspan0\x00'}) [ 549.917308][T16797] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 549.931867][ T26] audit: type=1804 audit(1644461280.648:969): pid=16790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/765/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 02:48:01 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0xc0189436, 0x0) 02:48:01 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f00000012c0), 0xc4200, 0x0) 02:48:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x7a000000) 02:48:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:01 executing program 4: openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x4540, 0x0) 02:48:01 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 02:48:01 executing program 4: socket(0x3, 0x0, 0x800) 02:48:01 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, 0x0) 02:48:01 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) [ 550.320152][T16802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x2c0, 0x4f8, 0x4f8, 0x2c0, 0x0, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@loopback, @private1, [], [], 'macvtap0\x00', 'ip6gretap0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @local}, @private0}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @dev, @dev}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@ah={{0x30}}, @common=@eui64={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x718) 02:48:01 executing program 4: pselect6(0x40, &(0x7f0000000040)={0x5}, &(0x7f0000000200)={0x4}, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) [ 550.422746][ T26] audit: type=1804 audit(1644461281.138:970): pid=16813 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/766/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 02:48:01 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 02:48:01 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2}, 0x0) 02:48:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x81000000) 02:48:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 550.562589][T16822] x_tables: duplicate underflow at hook 1 02:48:01 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 02:48:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@multicast1, @in=@multicast1}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, 0xe8) [ 550.687357][T16830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:01 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000040)) 02:48:01 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000280)) 02:48:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x2c0, 0x4f8, 0x4f8, 0x2c0, 0x0, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, &(0x7f0000000040), {[{{@ipv6={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0x0, 0xff000000], [0xff, 0xff, 0xffffffff, 0xffffff00], 'macvtap0\x00', 'ip6gretap0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x6, 0x80, 0x9, 0xa6, 0x3, @empty, @ipv4={'\x00', '\xff\xff', @local}, @private0, [0x0, 0xff000000, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 0x1481}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0x40, 0x40, 0xd6, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @dev, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xff], [0xffffff00, 0xffffffff, 0xffffff00], 0x8, 0x1605}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x91d, 0x0, 0x3}}, @common=@eui64={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x4, @ipv4=@broadcast, 0x4e20}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x718) 02:48:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x81030000) 02:48:01 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) 02:48:01 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 550.969160][T16845] x_tables: duplicate underflow at hook 1 [ 550.989854][T16848] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 551.070033][T16854] loop2: detected capacity change from 0 to 512 [ 551.132568][T16854] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 551.423735][ T7344] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 02:48:02 executing program 0: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:48:02 executing program 4: socket$inet(0x2, 0x5, 0x1) 02:48:02 executing program 3: r0 = io_uring_setup(0x5a8d, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 02:48:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x88a8ffff) 02:48:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:02 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 551.556886][T16864] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 551.575335][T16868] loop2: detected capacity change from 0 to 512 02:48:02 executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 551.654851][T16868] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 02:48:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) [ 551.706705][T16877] loop3: detected capacity change from 0 to 512 02:48:02 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001540), 0xffffffffffffffff) [ 551.816353][T16877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. 02:48:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x8a020000) 02:48:02 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:48:02 executing program 4: pselect6(0x40, &(0x7f00000000c0)={0x100000000}, 0x0, 0x0, 0x0, 0x0) [ 552.014561][T16888] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 552.084798][T16893] loop2: detected capacity change from 0 to 512 02:48:02 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x8002, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r0, 0x0) 02:48:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:02 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [ 552.128389][T16893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 02:48:02 executing program 3: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:48:03 executing program 4: syz_clone(0x100200, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) [ 552.249713][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 552.249728][ T26] audit: type=1400 audit(1644461282.968:978): avc: denied { execute } for pid=16900 comm="syz-executor.0" path="/dev/dsp" dev="devtmpfs" ino=1089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 02:48:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x901723f5) 02:48:03 executing program 4: socket$inet6(0xa, 0x0, 0x80000001) 02:48:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0) [ 552.455077][ T26] audit: type=1804 audit(1644461283.088:979): pid=16901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/769/cgroup.controllers" dev="sda1" ino=1184 res=1 errno=0 [ 552.460447][T16914] loop3: detected capacity change from 0 to 512 02:48:03 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x28202, 0x0) 02:48:03 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={0x0, 0x0, 0x28}, 0x10) [ 552.500174][T16913] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:03 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:48:03 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 02:48:03 executing program 4: syz_clone(0x93090900, 0x0, 0x0, 0x0, 0x0, 0x0) [ 552.692103][ T7346] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 552.722081][T16924] loop2: detected capacity change from 0 to 512 [ 552.730998][ T7346] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.756331][T16914] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 552.802177][ T7346] Buffer I/O error on dev loop2, logical block 0, async page read [ 552.888609][T16924] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. 02:48:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x91000000) 02:48:03 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x8002, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000080)) 02:48:03 executing program 3: socket$inet6(0xa, 0x1, 0x5) 02:48:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x1, 0x0) dup2(r0, r1) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7, &(0x7f00000001c0), 0x88) 02:48:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), 0x4) [ 553.020982][T16936] selinux_netlink_send: 9 callbacks suppressed [ 553.021005][T16936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16936 comm=syz-executor.5 02:48:03 executing program 4: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 02:48:03 executing program 0: ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) [ 553.159577][T16944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:03 executing program 2: delete_module(&(0x7f0000000040)='\v\x15\xe8\x19\xf4j5\xb94\xf3\xaa\x8a\x16\"\xab\xc4\x1e\x98\xe6wE\x17\xf20cP\xe4\xcc\x12T\xa4\x82\x0f^CL\xb8\\\x9b\x9dm\xfe\xc6\xce_jT!\xcd\xa1\x8e1\b\xea\x98d\xc2Y\xfd{x\xf72\x87\x8e\xac\x17\xe8\x98\x8f\xcd\x1a\x03\xbd\x1a>\xf6\xdc\xa6H\x1d\x12n\x19\b\x00t\xbd\xfbb\xa2k\x83\t\xff\xbf\xe6\xc4\xc0:;', 0x0) 02:48:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private}, 0x0, @in6=@private0}}, 0xe8) [ 553.210573][ T26] audit: type=1804 audit(1644461283.928:980): pid=16949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/770/cgroup.controllers" dev="sda1" ino=1171 res=1 errno=0 02:48:04 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 02:48:04 executing program 2: socketpair(0x1e, 0x0, 0x9, &(0x7f00000000c0)) 02:48:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x98030000) 02:48:04 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x8a002, 0x0) 02:48:04 executing program 0: socket$inet6(0xa, 0x0, 0x0) syz_clone(0x100200, 0x0, 0x0, &(0x7f0000001000), 0x0, &(0x7f0000001080)="c0") 02:48:04 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) accept$inet(r0, 0x0, 0x0) 02:48:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x14}}, 0x0) 02:48:04 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) connect$can_bcm(r0, 0x0, 0x0) [ 553.615138][T16969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16969 comm=syz-executor.5 02:48:04 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101601, 0x0) [ 553.664908][ T26] audit: type=1804 audit(1644461284.378:981): pid=16974 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/771/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 02:48:04 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e1200, 0x0) 02:48:04 executing program 3: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) 02:48:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:04 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b114b0}, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={0x0}) 02:48:04 executing program 2: sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0xe53}, 0x0) 02:48:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x9d160000) 02:48:04 executing program 4: mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 02:48:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 02:48:04 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x8) [ 554.019230][ T26] audit: type=1804 audit(1644461284.738:982): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/772/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 02:48:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000340)) 02:48:04 executing program 4: getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000005c0), 0x5, 0x40000) 02:48:04 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6062, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x2, &(0x7f00000002c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}]}) [ 554.063965][T17001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17001 comm=syz-executor.5 02:48:04 executing program 2: connect$inet(0xffffffffffffffff, 0x0, 0x0) 02:48:04 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x84000, 0x0) 02:48:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:04 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x8) 02:48:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x20}, 0x20}, 0x1, 0xc02000000000000}, 0x0) 02:48:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x9e000000) 02:48:05 executing program 4: io_uring_setup(0x43a0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x3e2}) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, 0x0) 02:48:05 executing program 2: getresuid(&(0x7f0000000180), 0x0, 0x0) 02:48:05 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x518, 0x2c0, 0x4f8, 0x4f8, 0x2c0, 0x0, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@loopback, @private1, [], [], 'macvtap0\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) [ 554.416510][T17027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17027 comm=syz-executor.5 [ 554.436115][ T26] audit: type=1804 audit(1644461285.158:983): pid=17021 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/773/cgroup.controllers" dev="sda1" ino=1154 res=1 errno=0 02:48:05 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x8002, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) [ 554.475275][ T3737] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 554.489439][T17027] __nla_validate_parse: 2 callbacks suppressed [ 554.489455][T17027] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:05 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT2(r0, 0x0, 0x0) [ 554.637418][ T26] audit: type=1400 audit(1644461285.358:984): avc: denied { read write } for pid=17035 comm="syz-executor.0" name="uhid" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 554.707041][ T26] audit: type=1400 audit(1644461285.388:985): avc: denied { open } for pid=17035 comm="syz-executor.0" path="/dev/uhid" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 554.895488][ T3737] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 555.505268][ T3737] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.40 [ 555.514427][ T3737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.588004][ T3737] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 555.790963][ T4575] usb 4-1: USB disconnect, device number 38 02:48:07 executing program 3: syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000010000)="000440000100010024000000001c08108f13", 0x12, 0x400}, {&(0x7f0000010200)="feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03e0ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed415cf9e0000000e6c2645f5303", 0x78e, 0x880}, {0x0, 0x0, 0x9000}], 0x0, &(0x7f0000011600)) 02:48:07 executing program 2: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 02:48:07 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) getpeername$inet(r0, 0x0, 0x0) 02:48:07 executing program 4: getegid() io_uring_setup(0x7df1, &(0x7f0000000a00)) 02:48:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x9effffff) 02:48:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:07 executing program 4: syz_open_dev$loop(&(0x7f00000005c0), 0x5, 0x0) 02:48:07 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x10840, 0x0) 02:48:07 executing program 0: io_uring_setup(0x2b98, &(0x7f00000001c0)={0x0, 0x0, 0x4}) [ 556.349494][T17041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17041 comm=syz-executor.5 [ 556.387176][T17049] loop3: detected capacity change from 0 to 144 [ 556.427441][T17041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 556.467333][T17049] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 556.504603][ T26] audit: type=1804 audit(1644461287.218:986): pid=17055 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/774/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0 02:48:07 executing program 2: ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x8002, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 02:48:07 executing program 0: getresuid(&(0x7f0000000180), &(0x7f00000001c0), 0x0) 02:48:07 executing program 4: r0 = syz_io_uring_setup(0x183, &(0x7f0000000180), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x10001, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2}, 0x2) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 02:48:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_deladdr={0x18}, 0x18}}, 0x0) 02:48:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xa2000000) 02:48:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)) 02:48:07 executing program 3: mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 02:48:07 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000), 0x10) [ 556.756665][T17069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17069 comm=syz-executor.5 [ 556.827662][T17069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:07 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 02:48:07 executing program 3: socketpair(0x1f, 0x0, 0x0, &(0x7f0000001440)) 02:48:07 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0xe53}, 0x0) 02:48:07 executing program 4: socket$inet6(0xa, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001040), &(0x7f0000001080)) 02:48:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xb9000000) 02:48:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000005c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) [ 557.119433][T17085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17085 comm=syz-executor.5 02:48:07 executing program 2: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) [ 557.193389][T17085] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:08 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x149a00, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x7) 02:48:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)) [ 557.296614][ T26] audit: type=1804 audit(1644461288.018:987): pid=17094 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/775/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 02:48:08 executing program 4: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) 02:48:08 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 02:48:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xba030000) 02:48:08 executing program 2: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100), 0x10) 02:48:08 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 02:48:08 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x149a00, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x7) 02:48:08 executing program 4: socketpair(0x2b, 0x1, 0x7, &(0x7f0000000000)) [ 557.631069][T17116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17116 comm=syz-executor.5 02:48:08 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) 02:48:08 executing program 4: syz_open_dev$loop(&(0x7f0000001440), 0x8001, 0x20800) 02:48:08 executing program 0: r0 = io_uring_setup(0x5a8d, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, r0], 0x2) 02:48:08 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540), 0x0}, 0x48) [ 557.718937][T17116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 557.743107][ T26] audit: type=1804 audit(1644461288.458:988): pid=17124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/776/cgroup.controllers" dev="sda1" ino=1186 res=1 errno=0 02:48:08 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) 02:48:08 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x2c, 0x0, 0x0, &(0x7f0000000900)) 02:48:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_deladdr={0x18}, 0x18}}, 0x0) 02:48:08 executing program 2: mq_open(&(0x7f0000002140)='\x8c\x00\x00\x00', 0x40, 0x0, 0x0) 02:48:08 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) 02:48:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000005c0)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 02:48:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xc1000000) 02:48:08 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) pidfd_send_signal(0xffffffffffffffff, 0x2f, 0x0, 0x0) [ 558.089303][T17148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17148 comm=syz-executor.5 02:48:08 executing program 4: mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x2, @thr={0x0, 0x0}}) 02:48:08 executing program 0: socket$inet6(0xa, 0x0, 0x0) syz_clone(0x100200, &(0x7f0000000000), 0x0, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="c0") 02:48:08 executing program 3: socket$inet(0x2, 0x0, 0x7ff) [ 558.198964][T17148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:09 executing program 3: ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x8002, 0x0) 02:48:09 executing program 4: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) [ 558.260615][ T26] audit: type=1804 audit(1644461288.978:989): pid=17150 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/777/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 02:48:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xc2030000) 02:48:09 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38}, 0x0) 02:48:09 executing program 3: socket$inet6(0x9, 0x0, 0x0) 02:48:09 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 02:48:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:09 executing program 4: r0 = io_uring_setup(0x5a8d, &(0x7f0000000080)={0x0, 0xc08c}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1) 02:48:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000005c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) [ 558.654190][T17177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17177 comm=syz-executor.5 02:48:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) 02:48:09 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 02:48:09 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000f40)) [ 558.717650][T17177] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:09 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) 02:48:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) [ 558.884443][ T26] audit: type=1804 audit(1644461289.598:990): pid=17184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/778/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 02:48:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xdd010000) 02:48:09 executing program 2: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x88001) 02:48:09 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 02:48:09 executing program 3: sched_getparam(0x0, &(0x7f0000000100)) [ 559.086223][T17204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17204 comm=syz-executor.5 02:48:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:09 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 02:48:09 executing program 2: r0 = add_key$fscrypt_provisioning(&(0x7f0000000f00), &(0x7f0000000f40)={'syz', 0x1}, &(0x7f0000000f80)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000003c0)='trusted\x00', &(0x7f0000000400)=@secondary) 02:48:09 executing program 4: socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001680)='./cgroup/syz0\x00', 0x200002, 0x0) 02:48:09 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x2c0, 0x4f8, 0x4f8, 0x2c0, 0x0, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@loopback, @private1, [], [], 'macvtap0\x00', 'ip6gretap0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @local}, @private0, [], [], [], 0x0, 0x402}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @dev, @dev}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@ah={{0x30}}, @common=@eui64={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x718) [ 559.169620][T17204] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:10 executing program 4: openat$vfio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 02:48:10 executing program 2: ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)=0x7) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000080)={0x0, 0x4, 0x81, 0xbbbbbbbb}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000200)={r1}) getegid() ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000240)={0x200}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x550, 0x3c0, 0x0, 0x2a8, 0x2a8, 0x100, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@ip={@broadcast, @remote, 0xff000000, 0x0, 'veth0_vlan\x00', 'bridge_slave_1\x00', {}, {}, 0x1, 0x2, 0x2}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e20}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x10001, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x7}}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "d9a2", 0x1}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x1, 0x10, [0x1d, 0x10, 0x30, 0xe, 0x36, 0x13, 0x18, 0xf, 0x35, 0x0, 0xf, 0x8, 0x15, 0x1d, 0x21, 0x1d], 0x0, 0x4, 0xb15e}}}, {{@ip={@multicast1, @multicast2, 0xffffff00, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x200, 0x6, [0x34, 0x0, 0x22, 0xc, 0x9, 0x28, 0x25, 0x34, 0x0, 0xa, 0x13, 0x34, 0x12, 0x19, 0x1f], 0x2, 0x0, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000900)={r1, r1, 0xfffffffffffffffd, 0x0, 0x6}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x8002, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) io_uring_setup(0x7df1, &(0x7f0000000a00)={0x0, 0x223e, 0x10, 0x3, 0x38e}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80), 0x80800, 0x0) 02:48:10 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) [ 559.261662][T17214] x_tables: duplicate underflow at hook 1 [ 559.316226][ T26] audit: type=1400 audit(1644461290.038:991): avc: denied { read } for pid=17217 comm="syz-executor.4" name="vfio" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vfio_device_t tclass=chr_file permissive=1 02:48:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe2000000) 02:48:10 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x2, &(0x7f0000000040)=@raw=[@map_idx], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 559.415256][ T26] audit: type=1400 audit(1644461290.038:992): avc: denied { open } for pid=17217 comm="syz-executor.4" path="/dev/vfio/vfio" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vfio_device_t tclass=chr_file permissive=1 02:48:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) r2 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:10 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) [ 559.491407][T17228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17228 comm=syz-executor.5 [ 559.545409][ T26] audit: type=1804 audit(1644461290.088:993): pid=17220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/779/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 [ 559.552914][T17228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 02:48:10 executing program 2: socketpair(0x22, 0x0, 0x0, &(0x7f0000000140)) 02:48:10 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc}) [ 559.605204][T17231] usb usb2: usbfs: process 17231 (syz-executor.4) did not claim interface 0 before use 02:48:10 executing program 3: pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 02:48:10 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001600)="8e"}, 0x48) 02:48:10 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc}) [ 559.649265][T17231] usb usb2: usbfs: process 17231 (syz-executor.4) did not claim interface 0 before use [ 559.711436][T17238] usb usb2: usbfs: process 17238 (syz-executor.4) did not claim interface 0 before use 02:48:10 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000200)) 02:48:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe3030000) [ 559.762426][T17231] usb usb2: usbfs: process 17231 (syz-executor.4) did not claim interface 0 before use [ 559.798011][ T26] audit: type=1804 audit(1644461290.518:994): pid=17248 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/780/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 559.825464][ C1] vkms_vblank_simulate: vblank timer overrun 02:48:10 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc}) 02:48:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) r2 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 559.908880][T17251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17251 comm=syz-executor.5 02:48:10 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x189223, 0x0) [ 559.966482][T17251] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:10 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r0}) [ 560.019743][T17257] usb usb2: usbfs: process 17257 (syz-executor.4) did not claim interface 0 before use 02:48:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) [ 560.098038][T17257] usb usb2: usbfs: process 17257 (syz-executor.4) did not claim interface 0 before use 02:48:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe9020000) 02:48:10 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r0}) [ 560.140211][T17259] usb usb2: usbfs: process 17259 (syz-executor.4) did not claim interface 0 before use [ 560.177448][T17257] usb usb2: usbfs: process 17257 (syz-executor.4) did not claim interface 0 before use [ 560.273330][T17269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17269 comm=syz-executor.5 [ 560.299387][ T26] audit: type=1804 audit(1644461291.018:995): pid=17270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/781/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 [ 560.311960][T17269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 560.326816][ C1] vkms_vblank_simulate: vblank timer overrun 02:48:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, 0x0, 0x0) 02:48:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) r2 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:11 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r0}) 02:48:11 executing program 2: socket$inet6(0xa, 0x6, 0x7) 02:48:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 02:48:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xea030000) [ 560.588788][T17280] usb usb2: usbfs: process 17280 (syz-executor.4) did not claim interface 0 before use [ 560.612531][T17281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17281 comm=syz-executor.5 [ 560.634686][ T26] audit: type=1804 audit(1644461291.348:996): pid=17283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/782/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 560.662137][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.678760][T17280] usb usb2: usbfs: process 17280 (syz-executor.4) did not claim interface 0 before use 02:48:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 02:48:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000002) 02:48:11 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000000)) [ 560.690569][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 560.719687][T17280] usb usb2: usbfs: process 17280 (syz-executor.4) did not claim interface 0 before use [ 560.749757][T17280] usb usb2: usbfs: process 17280 (syz-executor.4) did not claim interface 0 before use 02:48:11 executing program 2: openat$dsp(0xffffffffffffff9c, &(0x7f0000000400), 0x103240, 0x0) 02:48:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 02:48:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xeb020000) 02:48:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) r2 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:11 executing program 3: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 02:48:11 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x101002, 0x0) 02:48:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) [ 560.943222][T17302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17302 comm=syz-executor.5 [ 560.966504][T17303] usb usb2: usbfs: process 17303 (syz-executor.4) did not claim interface 0 before use 02:48:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 02:48:11 executing program 2: clock_settime(0x3, 0x0) [ 561.008147][T17303] usb usb2: usbfs: process 17303 (syz-executor.4) did not claim interface 0 before use [ 561.046546][T17302] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:11 executing program 0: mknod$loop(0x0, 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) [ 561.063188][T17311] usb usb2: usbfs: process 17311 (syz-executor.4) did not claim interface 0 before use [ 561.124512][T17303] usb usb2: usbfs: process 17303 (syz-executor.4) did not claim interface 0 before use 02:48:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 02:48:11 executing program 0: mknod$loop(0x0, 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 02:48:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) 02:48:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 02:48:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xf0020000) 02:48:12 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001680)='./cgroup/syz0\x00', 0x200002, 0x0) [ 561.375959][T17326] usb usb2: usbfs: process 17326 (syz-executor.4) did not claim interface 0 before use [ 561.379434][T17329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17329 comm=syz-executor.5 [ 561.408600][T17326] usb usb2: usbfs: process 17326 (syz-executor.4) did not claim interface 0 before use [ 561.442826][T17326] usb usb2: usbfs: process 17326 (syz-executor.4) did not claim interface 0 before use [ 561.474462][T17333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:12 executing program 3: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "97befb4f789aa703501e024aace47c7809f841b78cf7d07612df6d655c7f422d59746d81f3b0355c8f014a8a7971b427ec8c41fb7d7867abc8b6608b37a5d04a3f9192c0e556f2d851eddb8c4536b76d62fab07c81ffd371e12030964956020cc9745e427a7931440f6988f25719a815173c6c034b7e0674c198d4a9367fae5e03a8b700596ebd8458737526b9e02052fd92e8846b2dcf35d548fe8a47a62aa8af39cfbf0cca469bcfc82eb5fa5a141e0c549fa8884e303eefb070fb5b0578314734d602336cd53771d2b5de483851b8fd973878ad4ab203fa92418af040497a59905ef5b8c690e491c9b9b7f760e358bd00261d87d893807c0043ff770d876e"}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:12 executing program 0: mknod$loop(0x0, 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 02:48:12 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) 02:48:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x100000002) 02:48:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xf0ffffff) 02:48:12 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) [ 561.861331][T17343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17343 comm=syz-executor.5 [ 561.889162][T17342] usb usb2: usbfs: process 17342 (syz-executor.4) did not claim interface 0 before use [ 561.891995][T17343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:12 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) 02:48:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xf1ffffff) 02:48:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x0) [ 561.936914][T17342] usb usb2: usbfs: process 17342 (syz-executor.4) did not claim interface 0 before use [ 561.960891][T17342] usb usb2: usbfs: process 17342 (syz-executor.4) did not claim interface 0 before use 02:48:12 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 02:48:12 executing program 3: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:12 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) [ 562.110148][T17356] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 562.126237][T17357] usb usb2: usbfs: process 17357 (syz-executor.4) did not claim interface 0 before use 02:48:12 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) [ 562.181128][T17357] usb usb2: usbfs: process 17357 (syz-executor.4) did not claim interface 0 before use 02:48:13 executing program 3: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:13 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) 02:48:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xf5231790) 02:48:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) [ 562.327229][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 562.327246][ T26] audit: type=1804 audit(1644461293.048:1001): pid=17362 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/787/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 [ 562.361128][ C1] vkms_vblank_simulate: vblank timer overrun 02:48:13 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 02:48:13 executing program 3: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x0) 02:48:13 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) [ 562.482123][T17378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 562.509544][T17380] usb usb2: usbfs: process 17380 (syz-executor.4) did not claim interface 0 before use 02:48:13 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 02:48:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) [ 562.557153][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.563553][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 02:48:13 executing program 3: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:13 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) 02:48:13 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) [ 562.693524][T17394] usb usb2: usbfs: process 17394 (syz-executor.4) did not claim interface 0 before use [ 562.714658][ T26] audit: type=1804 audit(1644461293.428:1002): pid=17396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/788/cgroup.controllers" dev="sda1" ino=1162 res=1 errno=0 02:48:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) [ 562.742205][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.763014][T17397] usb usb2: usbfs: process 17397 (syz-executor.3) did not claim interface 0 before use 02:48:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xfcffffff) 02:48:13 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) 02:48:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001340)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @probe_response={@with_ht={{{}, {}, @broadcast, @device_b}}, 0x0, @default, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @val={0x2d, 0x1a}, @void, @void}}]}, 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r1, 0x0, 0x0) 02:48:13 executing program 3: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:13 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) [ 562.855657][T17403] usb usb2: usbfs: process 17403 (syz-executor.4) did not claim interface 0 before use 02:48:13 executing program 3: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:13 executing program 4: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:13 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:13 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) [ 562.933148][T17413] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 563.004901][ T26] audit: type=1804 audit(1644461293.718:1003): pid=17412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir382402024/syzkaller.RwH6we/789/cgroup.controllers" dev="sda1" ino=1186 res=1 errno=0 [ 563.019837][T17420] usb usb2: usbfs: process 17420 (syz-executor.4) did not claim interface 0 before use 02:48:13 executing program 3: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:13 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) 02:48:13 executing program 4: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:13 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "97befb4f789aa703501e024aace47c7809f841b78cf7d07612df6d655c7f422d59746d81f3b0355c8f014a8a7971b427ec8c41fb7d7867abc8b6608b37a5d04a3f9192c0e556f2d851eddb8c4536b76d62fab07c81ffd371e12030964956020cc9745e427a7931440f6988f25719a815173c6c034b7e0674c198d4a9367fae5e03a8b700596ebd8458737526b9e02052fd92e8846b2dcf35d548fe8a47a62aa8af39cfbf0cca469bcfc82eb5fa5a141e0c549fa8884e303eefb070fb5b0578314734d602336cd53771d2b5de483851b8fd973878ad4ab203fa92418af040497a59905ef5b8c690e491c9b9b7f760e358bd00261d87d893807c0043ff770d876e"}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:13 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 02:48:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xffffa888) 02:48:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) [ 563.216105][T17431] usb usb2: usbfs: process 17431 (syz-executor.4) did not claim interface 0 before use [ 563.247344][T17435] selinux_netlink_send: 3 callbacks suppressed 02:48:14 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) [ 563.247365][T17435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17435 comm=syz-executor.5 02:48:14 executing program 4: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:14 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r0}) 02:48:14 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) [ 563.308949][T17440] usb usb2: usbfs: process 17440 (syz-executor.3) did not claim interface 0 before use 02:48:14 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) [ 563.389452][T17446] usb usb2: usbfs: process 17446 (syz-executor.4) did not claim interface 0 before use 02:48:14 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r0}) 02:48:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xffffe000) 02:48:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:14 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:14 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:14 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "97befb4f789aa703501e024aace47c7809f841b78cf7d07612df6d655c7f422d59746d81f3b0355c8f014a8a7971b427ec8c41fb7d7867abc8b6608b37a5d04a3f9192c0e556f2d851eddb8c4536b76d62fab07c81ffd371e12030964956020cc9745e427a7931440f6988f25719a815173c6c034b7e0674c198d4a9367fae5e03a8b700596ebd8458737526b9e02052fd92e8846b2dcf35d548fe8a47a62aa8af39cfbf0cca469bcfc82eb5fa5a141e0c549fa8884e303eefb070fb5b0578314734d602336cd53771d2b5de483851b8fd973878ad4ab203fa92418af040497a59905ef5b8c690e491c9b9b7f760e358bd00261d87d893807c0043ff770d876e"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x84) 02:48:14 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) [ 563.548005][T17456] usb usb2: usbfs: process 17456 (syz-executor.2) did not claim interface 0 before use [ 563.579180][T17459] usb usb2: usbfs: process 17459 (syz-executor.4) did not claim interface 0 before use 02:48:14 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:14 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r0}) [ 563.615836][T17462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17462 comm=syz-executor.5 02:48:14 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:14 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) 02:48:14 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xfffff000) 02:48:14 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 02:48:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:14 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) 02:48:14 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:14 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:14 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 02:48:14 executing program 2: syz_open_dev$usbfs(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:14 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) syz_open_dev$usbfs(0x0, 0x0, 0x0) 02:48:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:14 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) [ 563.965274][T17491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17491 comm=syz-executor.5 02:48:14 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) [ 564.067387][T17501] usb usb2: usbfs: process 17501 (syz-executor.2) did not claim interface 0 before use 02:48:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xffffff7f) 02:48:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:14 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:15 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc}) 02:48:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:15 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 564.245135][T17513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17513 comm=syz-executor.5 [ 564.262416][T17516] usb usb2: usbfs: process 17516 (syz-executor.2) did not claim interface 0 before use 02:48:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:15 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc}) 02:48:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) [ 564.409231][T17527] usb usb2: usbfs: process 17527 (syz-executor.2) did not claim interface 0 before use 02:48:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xffffff9e) 02:48:15 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:15 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:15 executing program 0: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc}) 02:48:15 executing program 3: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) [ 564.533742][T17533] usb usb2: usbfs: process 17533 (syz-executor.1) did not claim interface 0 before use 02:48:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:15 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:15 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 564.587069][T17539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17539 comm=syz-executor.5 02:48:15 executing program 0: io_uring_setup(0x43a0, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x3e2}) 02:48:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:15 executing program 3: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) [ 564.677062][T17539] __nla_validate_parse: 4 callbacks suppressed [ 564.677081][T17539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xfffffff0) 02:48:15 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:15 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:15 executing program 3: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:15 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 02:48:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:15 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:15 executing program 4: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 02:48:15 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000240)) 02:48:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) [ 565.001309][T17571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17571 comm=syz-executor.5 [ 565.016426][T17571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xfffffff1) 02:48:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 02:48:15 executing program 4: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:15 executing program 1: syz_open_dev$usbfs(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05604, &(0x7f00000003c0)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0}}) 02:48:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:15 executing program 4: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 02:48:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_deladdr={0x18}, 0x18}}, 0x0) [ 565.246871][T17593] usb usb2: usbfs: process 17593 (syz-executor.1) did not claim interface 0 before use [ 565.275504][T17597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17597 comm=syz-executor.5 02:48:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) [ 565.318518][T17597] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:16 executing program 0: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x7}, &(0x7f0000000140), 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={[0x7]}, 0x8}) 02:48:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xfffffffc) 02:48:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x0, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 02:48:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={0x0, 0x0}) [ 565.540220][T17616] usb usb2: usbfs: process 17616 (syz-executor.1) did not claim interface 0 before use 02:48:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x0, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:16 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 02:48:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in6=@local}}, {{@in=@private}, 0x0, @in6=@private0}}, 0xe8) [ 565.625114][T17623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17623 comm=syz-executor.5 02:48:16 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) [ 565.711162][T17623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4000000000000) 02:48:16 executing program 0: pselect6(0x40, &(0x7f00000000c0)={0x100000000}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x7]}, 0x8}) 02:48:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x0, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:16 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x0, 0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:16 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:16 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x0, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:16 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) 02:48:16 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 566.006309][T17650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17650 comm=syz-executor.5 02:48:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) [ 566.086261][T17650] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x40030000000000) 02:48:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x0, 0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 02:48:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb2, 0x2}, {{@in=@private, 0x0, 0x2b}, 0xa, @in6=@private0}}, 0xe8) [ 566.212276][T17663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17663 comm=syz-executor.5 02:48:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 02:48:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1}}, 0x78, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:17 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2703c3, 0x0) 02:48:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x0, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) [ 566.373910][T17675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x0, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x0, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:17 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) 02:48:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe0ffff00000000) 02:48:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:17 executing program 0: socket$inet6(0xa, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 02:48:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x0, 0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) [ 566.599214][T17695] usb usb2: usbfs: process 17695 (syz-executor.3) did not claim interface 0 before use [ 566.618919][T17700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1}}, 0x80, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcdadf990301b98a873"}) 02:48:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xf0ffffffffffff) 02:48:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 02:48:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 566.878804][T17719] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:17 executing program 0: socket$inet6(0xa, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 566.921852][T17722] usb usb2: usbfs: process 17722 (syz-executor.4) did not claim interface 0 before use 02:48:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:18 executing program 1: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:18 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1}}, 0x2, 0x3, &(0x7f0000000880)="1ad1"}) 02:48:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b05d25a80648c6394f90224fc60100002400a000000053582c137153e37000c018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 02:48:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x100000000000000) 02:48:18 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x0) [ 567.483865][T17741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:18 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x0, &(0x7f0000000880)="1ad1"}) 02:48:18 executing program 1: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 567.539495][T17743] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. 02:48:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x6}, 0x48) [ 567.606179][T17747] usb usb2: usbfs: process 17747 (syz-executor.3) did not claim interface 0 before use [ 567.641733][T17743] netlink: zone id is out of range [ 567.670967][T17743] netlink: zone id is out of range [ 567.687454][T17751] usb usb2: usbfs: process 17751 (syz-executor.2) did not claim interface 0 before use 02:48:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x200000000000000) 02:48:18 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001000)={0x2c, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 567.733043][T17743] netlink: del zone limit has 8 unknown bytes 02:48:18 executing program 1: syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0)={0xa1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 568.175021][T11675] usb 1-1: new high-speed USB device number 45 using dummy_hcd 02:48:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x78, 0x0, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3acf2292e8730bce2135903ee2a3701b18973562b7c73612d0af388c6a388e3e86a7f795896e88e298070c39a6b2c56dbdf01a177a149d27d2433bfcd"}) 02:48:19 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x0, &(0x7f0000000880)="1ad1"}) 02:48:19 executing program 4: openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 02:48:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 02:48:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x300000000000000) [ 568.425069][T11675] usb 1-1: Using ep0 maxpacket: 16 [ 568.460008][T17769] usb usb2: usbfs: process 17769 (syz-executor.2) did not claim interface 0 before use [ 568.475907][T17768] selinux_netlink_send: 9 callbacks suppressed [ 568.475925][T17768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17768 comm=syz-executor.5 02:48:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) [ 568.528346][T17771] usb usb2: usbfs: process 17771 (syz-executor.3) did not claim interface 0 before use [ 568.536709][T17768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17768 comm=syz-executor.5 [ 568.555575][T11675] usb 1-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 568.568621][T11675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 02:48:19 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x40240, 0x0) 02:48:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 02:48:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) [ 568.595835][T11675] usb 1-1: config 0 descriptor?? 02:48:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x400000000000000) [ 568.700718][T17778] usb usb2: usbfs: process 17778 (syz-executor.3) did not claim interface 0 before use [ 568.729432][T17781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17781 comm=syz-executor.5 [ 568.809841][T17781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17781 comm=syz-executor.5 [ 568.885387][T11675] usb 1-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 570.045241][T11675] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 570.054619][T11675] usb 1-1: USB disconnect, device number 45 02:48:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:21 executing program 4: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x44001, 0x0) 02:48:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) 02:48:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x500000000000000) 02:48:21 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x8) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 02:48:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x2, 0x0, &(0x7f0000000880)="1ad1"}) 02:48:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 570.581398][T17792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17792 comm=syz-executor.5 [ 570.582786][T17790] usb usb2: usbfs: process 17790 (syz-executor.2) did not claim interface 0 before use 02:48:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 570.630298][T17789] usb usb2: usbfs: process 17789 (syz-executor.3) did not claim interface 0 before use [ 570.655754][T17792] __nla_validate_parse: 3 callbacks suppressed [ 570.655772][T17792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) [ 570.751120][T17796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17796 comm=syz-executor.5 02:48:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:21 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000b0cd6f10da0b3228fef4000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001000)={0x2c, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 570.799828][T17800] usb usb2: usbfs: process 17800 (syz-executor.3) did not claim interface 0 before use 02:48:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x600000000000000) 02:48:21 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x29942, 0x0) 02:48:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:21 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x8002, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r0, 0x0) [ 570.962334][T17806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17806 comm=syz-executor.5 [ 570.975275][T17810] usb usb2: usbfs: process 17810 (syz-executor.3) did not claim interface 0 before use 02:48:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) [ 571.016624][T17806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 571.098532][T17817] usb usb2: usbfs: process 17817 (syz-executor.3) did not claim interface 0 before use [ 571.155335][T17818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17818 comm=syz-executor.5 [ 571.245050][ T3679] usb 5-1: new high-speed USB device number 8 using dummy_hcd 02:48:22 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) 02:48:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000002c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:22 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/159, 0x9f) 02:48:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x700000000000000) [ 571.455348][T17824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17824 comm=syz-executor.5 [ 571.469795][T17825] usb usb2: usbfs: process 17825 (syz-executor.3) did not claim interface 0 before use [ 571.485457][ T3679] usb 5-1: Using ep0 maxpacket: 16 [ 571.506075][T17824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 571.553060][T17828] usb usb2: usbfs: process 17828 (syz-executor.2) did not claim interface 0 before use [ 571.613485][T17829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17829 comm=syz-executor.5 [ 571.620127][ T3679] usb 5-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=f4.fe [ 571.646121][ T3679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.664037][ T3679] usb 5-1: config 0 descriptor?? [ 571.935204][ T3679] usb 5-1: dvb_usb_v2: found a 'Realtek RTL2832U reference design' in warm state [ 572.695182][ T3679] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 572.709360][ T3679] usb 5-1: USB disconnect, device number 8 02:48:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter, 0x48) 02:48:23 executing program 0: pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x3}, &(0x7f0000000180), 0x0) 02:48:23 executing program 1: r0 = io_uring_setup(0x5a8d, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) 02:48:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) 02:48:23 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x3c, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3"}) 02:48:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x800000000000000) 02:48:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) [ 573.228811][T17839] usb usb2: usbfs: process 17839 (syz-executor.2) did not claim interface 0 before use [ 573.240690][T17836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:24 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f00000000c0)) [ 573.273593][T17834] usb usb2: usbfs: process 17834 (syz-executor.3) did not claim interface 0 before use 02:48:24 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x662000, 0x0) 02:48:24 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x8) 02:48:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, 0x0}) 02:48:24 executing program 0: ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "97befb4f789aa703501e024aace47c7809f841b78cf7d07612df6d655c7f422d59746d81f3b0355c8f014a8a7971b427ec8c41fb7d7867abc8b6608b37a5d04a3f9192c0e556f2d851eddb8c4536b76d62fab07c81ffd371e12030964956020cc9745e427a7931440f6988f25719a815173c6c034b7e0674c198d4a9367fae5e03a8b700596ebd8458737526b9e02052fd92e8846b2dcf35d548fe8a47a62aa8af39cfbf0cca469bcfc82eb5fa5a141e0c549fa8884e303eefb070fb5b0578314734d602336cd53771d2b5de483851b8fd973878ad4ab203fa92418af040497a59905ef5b8c690e491c9b9b7f760e358bd00261d87d893807c0043ff770d876e"}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0xd83, 0x3, &(0x7f0000000880)="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"}) 02:48:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x3c, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3"}) 02:48:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x900000000000000) 02:48:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}}, 0xe8) 02:48:24 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x8) [ 573.461317][T17853] usb usb2: usbfs: process 17853 (syz-executor.2) did not claim interface 0 before use [ 573.529000][T17857] usb usb2: usbfs: process 17857 (syz-executor.3) did not claim interface 0 before use [ 573.561465][T17860] selinux_netlink_send: 2 callbacks suppressed 02:48:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:24 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) [ 573.561483][T17860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17860 comm=syz-executor.5 02:48:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x3c, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b5584a5bc4663dd23327a6f47a2037004ca48d6c3c55e96f3755e98660b61b3"}) 02:48:24 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000000c0)) [ 573.671690][T17867] usb usb2: usbfs: process 17867 (syz-executor.2) did not claim interface 0 before use [ 573.684199][T17860] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:24 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x8002, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000280)) 02:48:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 573.722853][T17872] usb usb2: usbfs: process 17872 (syz-executor.3) did not claim interface 0 before use 02:48:24 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 02:48:24 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) [ 573.829337][T17875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17875 comm=syz-executor.5 [ 573.830106][T17877] usb usb2: usbfs: process 17877 (syz-executor.2) did not claim interface 0 before use 02:48:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xa00000000000000) 02:48:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:24 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x2c0, 0x4f8, 0x4f8, 0x2c0, 0x0, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@loopback, @private1, [], [], 'macvtap0\x00', 'ip6gretap0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @local}, @private0}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @dev, @dev}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x100, 0x140, 0x0, {}, [@common=@ah={{0x30}}, @common=@eui64={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x718) 02:48:24 executing program 4: ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x8) [ 573.947672][ T26] audit: type=1400 audit(1644461304.668:1004): avc: denied { connect } for pid=17882 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 02:48:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) [ 574.016162][T17886] x_tables: duplicate underflow at hook 1 [ 574.028881][T17887] usb usb2: usbfs: process 17887 (syz-executor.3) did not claim interface 0 before use [ 574.051901][T17890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17890 comm=syz-executor.5 02:48:24 executing program 0: sched_setattr(0x0, &(0x7f0000000240)={0x38}, 0x0) 02:48:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:24 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)}, 0x48) 02:48:24 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$ptp(r0, 0x0, 0x0) [ 574.128260][T17893] usb usb2: usbfs: process 17893 (syz-executor.2) did not claim interface 0 before use [ 574.170587][T17890] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:24 executing program 4: pselect6(0x40, &(0x7f0000000040)={0x5}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 02:48:25 executing program 0: openat$vfio(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) 02:48:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) [ 574.355651][T17907] usb usb2: usbfs: process 17907 (syz-executor.3) did not claim interface 0 before use [ 574.369349][T17904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17904 comm=syz-executor.5 02:48:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xc00000000000000) 02:48:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x1, 0x3, &(0x7f0000000880)="1a"}) 02:48:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = gettid() process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 02:48:25 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) process_mrelease(r0, 0x0) 02:48:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x1e, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b55"}) 02:48:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) 02:48:25 executing program 4: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x3}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x7]}, 0x8}) [ 574.486234][T17914] usb usb2: usbfs: process 17914 (syz-executor.2) did not claim interface 0 before use [ 574.511530][T17921] usb usb2: usbfs: process 17921 (syz-executor.3) did not claim interface 0 before use 02:48:25 executing program 0: pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) 02:48:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x1e, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0251046fabbf28d7205244bb17e8b55"}) [ 574.532147][T17922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17922 comm=syz-executor.5 [ 574.562738][T17922] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:25 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 02:48:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000980), 0x8002, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) [ 574.669928][T17931] usb usb2: usbfs: process 17931 (syz-executor.3) did not claim interface 0 before use [ 574.694221][T17932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17932 comm=syz-executor.5 [ 574.713160][T17930] usb usb2: usbfs: process 17930 (syz-executor.2) did not claim interface 0 before use 02:48:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe00000000000000) 02:48:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:25 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000d00), 0x0, 0x0) 02:48:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045519, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 02:48:25 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x18, 0x0}, 0x0) [ 574.855638][T17939] usb usb2: usbfs: process 17939 (syz-executor.2) did not claim interface 0 before use [ 574.873462][T17943] usb usb2: usbfs: process 17943 (syz-executor.3) did not claim interface 0 before use 02:48:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) [ 574.913523][T17946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17946 comm=syz-executor.5 [ 574.975641][T17946] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 574.985682][T17950] usb usb2: usbfs: process 17950 (syz-executor.2) did not claim interface 0 before use [ 575.044328][T17951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17951 comm=syz-executor.5 02:48:26 executing program 0: syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x8880) 02:48:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045519, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 02:48:26 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x81, 0xfffffffffffeffff}, &(0x7f0000000300)={0xd47b}, 0x0, &(0x7f00000003c0)={r0, r1+60000000}, &(0x7f0000000440)={&(0x7f0000000400)={[0xffffffff]}, 0x8}) 02:48:26 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000001080)) 02:48:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe02000000000000) 02:48:26 executing program 2: socket$inet(0x2, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) [ 575.529931][T17960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17960 comm=syz-executor.5 [ 575.547321][T17961] usb usb2: usbfs: process 17961 (syz-executor.3) did not claim interface 0 before use 02:48:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000001140)={0x0, @broadcast, 0x0, 0x0, 'dh\x00'}, 0x2c) 02:48:26 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @empty}, 0xc) 02:48:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) [ 575.581354][T17964] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000080)=0x3) [ 575.664070][T17971] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:0 02:48:26 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RGETATTR(r0, &(0x7f00000001c0)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0xee01}}, 0xa0) write$P9_RLOCK(r0, &(0x7f0000000080)={0x8}, 0x41) 02:48:26 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540), 0x40002, 0x0) [ 575.716283][T17976] usb usb2: usbfs: process 17976 (syz-executor.3) did not claim interface 0 before use 02:48:26 executing program 0: syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1088000, &(0x7f00000004c0)) 02:48:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0xf, 0x3, &(0x7f0000000880)="1ad16ce0e889a4159deca901b464d0"}) [ 575.809550][T17960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17960 comm=syz-executor.5 02:48:26 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) 02:48:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xf00000000000000) 02:48:26 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) 02:48:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) 02:48:26 executing program 0: syz_open_dev$usbfs(&(0x7f0000000540), 0x77, 0x4140) [ 575.957804][T17988] usb usb2: usbfs: process 17988 (syz-executor.3) did not claim interface 0 before use 02:48:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) 02:48:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:26 executing program 0: syz_mount_image$nilfs2(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x1011020, &(0x7f0000001880)) [ 576.073053][T17995] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:26 executing program 2: syz_mount_image$nilfs2(0x0, 0x0, 0x0, 0x1, &(0x7f0000001100)=[{&(0x7f0000000100)="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", 0x1000, 0x100000000}], 0x0, 0x0) [ 576.170460][T18002] usb usb2: usbfs: process 18002 (syz-executor.3) did not claim interface 0 before use 02:48:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1000000000000000) 02:48:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:27 executing program 0: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 02:48:27 executing program 1: sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x34}}, 0x400c0d4) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) [ 576.290335][T18007] loop2: detected capacity change from 0 to 264192 [ 576.341323][T18012] usb usb2: usbfs: process 18012 (syz-executor.3) did not claim interface 0 before use [ 576.346650][T18010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000300)={'sit0\x00', 0x0}) 02:48:27 executing program 4: syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f00000015c0)={[], [{@smackfshat={'smackfshat', 0x3d, '['}}, {@context={'context', 0x3d, 'staff_u'}}]}) 02:48:27 executing program 2: fanotify_mark(0xffffffffffffffff, 0x12, 0x0, 0xffffffffffffffff, 0x0) 02:48:27 executing program 1: sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x34}}, 0x400c0d4) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 02:48:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2, &(0x7f0000000040)='x', 0x1) 02:48:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1100000000000000) 02:48:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000009c0)={0x0, {0x0, 0x7fff}}) 02:48:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f00000002c0)) 02:48:27 executing program 2: syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) [ 576.955842][T18028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 576.956163][T18029] usb usb2: usbfs: process 18029 (syz-executor.3) did not claim interface 0 before use 02:48:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00), 0xff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40305839, 0x0) [ 577.051877][ C0] I/O error, dev loop4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 577.062589][T18032] NILFS (loop4): unable to read secondary superblock (blocksize = 1024) [ 577.085006][T18032] NILFS (loop4): couldn't find nilfs on the device 02:48:27 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x24081, 0x0) 02:48:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x8, 0x3, &(0x7f0000000880)="1ad16ce0e889a415"}) [ 577.147641][ T26] audit: type=1400 audit(1644461307.868:1005): avc: denied { write } for pid=18041 comm="syz-executor.1" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 02:48:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1200000000000000) 02:48:27 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x24081, 0x0) 02:48:27 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x5}}) 02:48:27 executing program 2: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 577.236758][T18044] usb usb2: usbfs: process 18044 (syz-executor.3) did not claim interface 0 before use 02:48:28 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 02:48:28 executing program 2: io_uring_setup(0x247c, &(0x7f0000000040)) 02:48:28 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000002c0)=ANY=[@ANYBLOB='\t']) 02:48:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x1, 0x3, &(0x7f0000000880)="1a"}) [ 577.304081][T18052] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:28 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000d00), 0xff, 0x48002) 02:48:28 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) [ 577.422287][T18062] usb usb2: usbfs: process 18062 (syz-executor.3) did not claim interface 0 before use 02:48:28 executing program 2: syz_mount_image$nilfs2(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x12003, &(0x7f00000000c0)) 02:48:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0xd, 0x0, 0x0) 02:48:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1300000000000000) 02:48:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x8004550f, &(0x7f0000000000)=0x40) 02:48:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00), 0xff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x4030582a, 0x0) 02:48:28 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) [ 577.595167][T18075] usb usb2: usbfs: process 18075 (syz-executor.3) did not claim interface 0 before use [ 577.622375][T18077] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:28 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d08, &(0x7f0000001140)=0x6) 02:48:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:28 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x2001000, &(0x7f0000000400)={[{@order_strict}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) 02:48:28 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d08, &(0x7f0000001140)) [ 577.775512][T18089] usb usb2: usbfs: process 18089 (syz-executor.3) did not claim interface 0 before use 02:48:28 executing program 4: syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x0) 02:48:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1400000000000000) 02:48:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840), 0x908, 0x1) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x3, &(0x7f0000000880)}) 02:48:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:28 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x7c, 0x42342) 02:48:28 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@remote}, 0x10) 02:48:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:28 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x7c, 0x42342) 02:48:28 executing program 4: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) [ 577.940961][T18102] usb usb2: usbfs: process 18102 (syz-executor.3) did not claim interface 0 before use [ 577.957039][T18104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, @mcast2, @local}}) 02:48:28 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000380)="c39d493e370a3a7f85c8bea11a92c0ea85b3062354fd3e13aebee505edaa4df4d19ddd4487408695addfa6b3d92f76d619fa3914fbde917a6dfef295db790104000018aa5d97c30d7f2ce69a8aa8a4bf6d057c78e06645514d2f0986cb70abb5bb25104159c89f29432895cb034b73a3dbb5c3ecf04c46a42b89237a5a0025a1c19c7e90e4510531cfdc95166da66a3ff66a59b5a91c6496987eae5ba0e4acf9e6df4f322b28dce435b1b3573fe8c0fc59436c736fd1f689998a83dee5", &(0x7f0000000340)=@tcp6}, 0xfffffece) 02:48:28 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00), 0xff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x4030582b, 0x0) 02:48:28 executing program 4: syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB=',']) 02:48:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1500000000000000) 02:48:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:28 executing program 3: syz_mount_image$nilfs2(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x428) 02:48:29 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x8088c0, &(0x7f0000000780)) 02:48:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x7, 0x0, 0x0) 02:48:29 executing program 3: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500), 0x838000, 0x0) [ 578.277173][ C1] I/O error, dev loop4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 578.300319][T18130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) [ 578.322875][T18127] NILFS (loop4): unable to read secondary superblock (blocksize = 1024) 02:48:29 executing program 3: socketpair(0x11, 0x2, 0xa28, &(0x7f0000000000)) [ 578.360302][T18127] NILFS (loop4): couldn't find nilfs on the device [ 578.391137][ C0] I/O error, dev loop2, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 02:48:29 executing program 1: syz_mount_image$nilfs2(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000480)=[{&(0x7f00000000c0)="10", 0x1}, {&(0x7f0000000200)='W', 0x1, 0x80000001}], 0x0, 0x0) [ 578.405610][T18137] NILFS (loop2): unable to read secondary superblock (blocksize = 1024) [ 578.442856][T18137] NILFS (loop2): couldn't find nilfs on the device 02:48:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00), 0xff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40305828, 0x0) 02:48:29 executing program 4: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@broadcast, @loopback}, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:48:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) [ 578.511038][T18144] loop1: detected capacity change from 0 to 264192 02:48:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1502000000000000) 02:48:29 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000040)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0xee00}}, 0xa0) 02:48:29 executing program 1: sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="080001006800000008000100270000"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x400c0d4) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 02:48:29 executing program 3: syz_mount_image$nilfs2(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:48:29 executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1}) [ 578.672193][T18153] selinux_netlink_send: 14 callbacks suppressed [ 578.672213][T18153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18153 comm=syz-executor.5 02:48:29 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) 02:48:29 executing program 2: socketpair(0x22, 0x0, 0x9, &(0x7f0000000140)) 02:48:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 02:48:29 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0x0, 0x8}}) 02:48:29 executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:29 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x40086602, &(0x7f0000000040)) [ 578.836791][T18153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:29 executing program 2: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) [ 578.959091][ T26] audit: type=1400 audit(1644461309.678:1006): avc: denied { setattr } for pid=18173 comm="syz-executor.1" path="/dev/mixer" dev="devtmpfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 579.048450][T18174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18174 comm=syz-executor.5 02:48:29 executing program 0: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:29 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x4}, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000]}) 02:48:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @dev}}}, {{@in6=@private1}, 0x0, @in6=@empty}}, 0xe8) 02:48:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0185502, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 02:48:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1600000000000000) 02:48:29 executing program 1: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, r0+60000000}, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) 02:48:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0xc0105500, &(0x7f0000000000)=0x40) 02:48:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x53) 02:48:29 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:29 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0) [ 579.308893][T18188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18188 comm=syz-executor.5 [ 579.373038][T18188] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x53) 02:48:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) [ 579.413806][T18193] vhci_hcd: default hub control req: 4000 v0000 i0000 l0 [ 579.421582][ T26] audit: type=1400 audit(1644461310.138:1007): avc: denied { ioctl } for pid=18195 comm="syz-executor.2" path="socket:[81978]" dev="sockfs" ino=81978 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 02:48:30 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:30 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4e8, 0x0, 0x218, 0x218, 0x400, 0x400, 0x400, 0x4, 0x0, {[{{@arp={@multicast1, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvtap0\x00', 'veth0_vlan\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "1ffd58f8c9e039cd841aa5d71a8ded1ee8fb3224366ad012ab974c45180145572b4a6a254758a9425e9eee42659719535ce1a6ed9d2532a352ab2884028ff11d"}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x538) 02:48:30 executing program 4: write$hidraw(0xffffffffffffffff, 0x0, 0x0) [ 579.609093][T18198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18198 comm=syz-executor.5 02:48:30 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) [ 579.668245][T18205] x_tables: duplicate underflow at hook 1 02:48:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1800000000000000) [ 579.802807][T18211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18211 comm=syz-executor.5 [ 579.851512][T18211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 579.916710][T18211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18211 comm=syz-executor.5 02:48:30 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}) io_uring_setup(0x247c, &(0x7f0000000040)={0x0, 0x37ee, 0x8, 0x1}) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) 02:48:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x2, 0x0, 0x0, 0x0) 02:48:30 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x4080) 02:48:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3, 0x0, 0x0) 02:48:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1900000000000000) [ 580.091988][T18221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18221 comm=syz-executor.5 02:48:30 executing program 4: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[], [{@smackfshat}, {@smackfsdef}]}) 02:48:30 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e01000066230f40ef170372dde100000001090212000100001a000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0xb, 0x2, "4014"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001140)={0x44, &(0x7f0000000f00)={0x0, 0x0, 0x2, "b5fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 02:48:30 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2020004, &(0x7f00000035c0)) 02:48:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:30 executing program 1: syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x80) 02:48:31 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGRDESC(r0, 0x90044802, 0x0) [ 580.261995][ C0] I/O error, dev loop4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 580.273910][T18230] NILFS (loop4): unable to read secondary superblock (blocksize = 1024) [ 580.290463][T18221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18221 comm=syz-executor.5 02:48:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000040)="9b", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001640)=ANY=[@ANYBLOB], 0x40}}], 0x1, 0x24000045) 02:48:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) [ 580.314862][T18230] NILFS (loop4): couldn't find nilfs on the device 02:48:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1a00000000000000) 02:48:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:31 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 02:48:31 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000d00), 0x0, 0x41) [ 580.483357][T18244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18244 comm=syz-executor.5 [ 580.545067][ T3679] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 580.609893][T18251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18251 comm=syz-executor.5 [ 580.935246][ T3679] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=e1.dd [ 580.944320][ T3679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.960130][ T3679] usb 4-1: config 0 descriptor?? [ 582.095060][ T3679] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 583.667914][ T3679] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 583.678987][ T3679] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 583.690850][ T3679] asix: probe of 4-1:0.0 failed with error -71 [ 583.703917][ T3679] usb 4-1: USB disconnect, device number 39 02:48:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), 0x4) 02:48:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x12, 0x0, 0x0) 02:48:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00), 0xff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) 02:48:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1c00000000000000) 02:48:34 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e01000066230f40ef170372dde100000001090212000100001a000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0xb, 0x2, "4014"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001140)={0x44, &(0x7f0000000f00)={0x0, 0x0, 0x2, "b5fd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 02:48:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f0000000100)) [ 584.205136][T18258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18258 comm=syz-executor.5 02:48:35 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ppoll(&(0x7f00000000c0)=[{r0, 0x4042}], 0x1, 0x0, 0x0, 0x0) 02:48:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:35 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) [ 584.260129][T18258] __nla_validate_parse: 2 callbacks suppressed [ 584.260149][T18258] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:35 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000100)) [ 584.392577][T18273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18273 comm=syz-executor.5 [ 584.515056][ T3711] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 584.925276][ T3711] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=e1.dd [ 584.934403][ T3711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.945382][ T3711] usb 4-1: config 0 descriptor?? [ 586.105074][ T3711] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 587.655168][ T3711] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 587.665337][ T3711] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 587.677094][ T3711] asix: probe of 4-1:0.0 failed with error -71 [ 587.687888][ T3711] usb 4-1: USB disconnect, device number 40 02:48:38 executing program 3: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x204000, 0x0) 02:48:38 executing program 2: syz_mount_image$nilfs2(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x1010020, &(0x7f0000001880)) 02:48:38 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000340)='./file0\x00', 0x22000101) 02:48:38 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ppoll(&(0x7f00000000c0)=[{r0, 0x4042}], 0x1, 0x0, 0x0, 0x0) 02:48:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1d00000000000000) 02:48:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) [ 588.212406][T18284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18284 comm=syz-executor.5 02:48:38 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x11, 0x0, 0x0, 0x3b) 02:48:39 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000b40)={0x5fd0}, 0x0, &(0x7f0000000c00)={0x0, 0x989680}, 0x0) [ 588.265427][T18284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:39 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) 02:48:39 executing program 3: io_uring_setup(0x247c, &(0x7f0000000040)={0x0, 0x37ee, 0x8}) 02:48:39 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2001000, &(0x7f0000000400)) 02:48:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x0, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:39 executing program 4: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) 02:48:39 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RLOCK(r0, &(0x7f0000000000)={0x8}, 0x8) [ 588.433519][T18298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18298 comm=syz-executor.5 02:48:39 executing program 3: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41c2c0, 0x0) 02:48:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1e00000000000000) 02:48:39 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x22000101) 02:48:39 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, 0x0) 02:48:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x0, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x4}, 0x0, [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000]}) 02:48:39 executing program 3: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[], [{@smackfsdef={'smackfsdef', 0x3d, '#\x8e!@'}}]}) [ 588.660150][T18317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18317 comm=syz-executor.5 02:48:39 executing program 4: getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@rand_addr, @empty}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000480)={{0x0, @loopback, 0x0, 0x0, 'nq\x00', 0x16, 0xffffffe1, 0x6f}, {@private}}, 0x44) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) 02:48:39 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0xd47b}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={[0xffffffff]}, 0x8}) 02:48:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4e8, 0x0, 0x218, 0x218, 0x400, 0x400, 0x400, 0x4, 0x0, {[{{@arp={@multicast1, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvtap0\x00', 'veth0_vlan\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "1ffd58f8c9e039cd841aa5d71a8ded1ee8fb3224366ad012ab974c45180145572b4a6a254758a9425e9eee42659719535ce1a6ed9d2532a352ab2884028ff11d"}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:tmpreaper_exec_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x538) 02:48:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x0, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) [ 588.706385][T18317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 588.776151][ C0] I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 588.786819][T18323] NILFS (loop3): unable to read secondary superblock (blocksize = 1024) [ 588.812007][T18330] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 02:48:39 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfc, &(0x7f0000000040)) 02:48:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x573e, 0x0, 0x0, 0x1}, 0x48) [ 588.843203][T18323] NILFS (loop3): couldn't find nilfs on the device [ 588.876273][T18332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18332 comm=syz-executor.5 02:48:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x1f00000000000000) 02:48:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x7ff00003, &(0x7f0000000080)}) 02:48:39 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$P9_RGETATTR(r0, 0x0, 0x0) 02:48:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000940)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "d6709b14b37609d73b95812abd68d25e6275cf3b01bbac585f93cfea70e7a9eb389320d1ebdcf31ad9cc53c8504e406260174e3697cc489fa4bdd400436f6bc6"}, 0x48, r0) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 02:48:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x13, 0x0, 0x0) 02:48:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000001280), 0x4) 02:48:39 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000040)='x', 0x1) [ 589.040825][T18346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18346 comm=syz-executor.5 02:48:39 executing program 1: prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='MAY_WRITE') 02:48:39 executing program 2: fanotify_init(0x0, 0xdcab70d0a2b8acd0) [ 589.106373][T18346] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x11, 0x0, 0x0, 0x4) 02:48:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2000000000000000) 02:48:40 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:40 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d1a, &(0x7f00000000c0)) 02:48:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r1 = socket(0x2, 0x1, 0x0) dup2(r1, r0) 02:48:40 executing program 4: syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) 02:48:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000040)='x', 0x1) [ 589.270451][T18359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18359 comm=syz-executor.5 02:48:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000680)={0x0, {0x0, 0x0, 0x0, 0x0, 0x30000}}) 02:48:40 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00), 0xff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40305829, 0x0) 02:48:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x5522, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) [ 589.374393][T18374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18374 comm=syz-executor.5 02:48:40 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) 02:48:40 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1}) [ 589.436681][T18374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:40 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d08, 0x0) 02:48:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2003000000000000) 02:48:40 executing program 4: syz_mount_image$nilfs2(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x2000, &(0x7f0000000540)) 02:48:40 executing program 3: syz_clone3(&(0x7f00000002c0)={0x40002000, 0x0, 0x0, 0x0, {0x39}, &(0x7f0000000140)=""/224, 0xe0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 02:48:40 executing program 1: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000580)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 02:48:40 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:40 executing program 2: syz_mount_image$nilfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r0 = fanotify_init(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x184, 0x4800101b, r0, 0x0) [ 589.607605][T18386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18386 comm=syz-executor.5 02:48:40 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1}) 02:48:40 executing program 4: syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB=',smackfstransmute=']) 02:48:40 executing program 1: r0 = fanotify_init(0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0x0, 0x0) 02:48:40 executing program 2: syz_mount_image$nilfs2(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000480)=[{&(0x7f00000000c0)="10", 0x1}, {&(0x7f0000000200)='W', 0x1, 0x80000001}, {&(0x7f00000003c0)='\v', 0x1, 0xffffffff}], 0x0, 0x0) [ 589.768462][T18402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18402 comm=syz-executor.5 [ 589.817860][T18403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 589.848569][T18409] loop2: detected capacity change from 0 to 264192 02:48:40 executing program 1: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440), 0x4601, 0x0) 02:48:40 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, 0x0) [ 589.862748][ C0] I/O error, dev loop4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 589.875886][T18411] NILFS (loop4): unable to read secondary superblock (blocksize = 1024) [ 589.917201][T18411] NILFS (loop4): couldn't find nilfs on the device [ 590.053783][T18402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18402 comm=syz-executor.5 02:48:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2100000000000000) 02:48:40 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0045878, 0x0) 02:48:40 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) read$hidraw(r0, &(0x7f0000000cc0)=""/4096, 0x1000) 02:48:40 executing program 1: syz_mount_image$nilfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) 02:48:40 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, 0x0) 02:48:40 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x624000, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 02:48:40 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getpeername$inet(r0, 0x0, 0x0) 02:48:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3, &(0x7f0000000040)='x', 0x1) 02:48:40 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000640)={{0x0, 0x2}}) [ 590.220705][T18421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18421 comm=syz-executor.5 02:48:41 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, 0x0) [ 590.277256][T18429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:41 executing program 3: syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x600680) 02:48:41 executing program 1: socket$l2tp(0x2, 0x2, 0x73) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900060000000000"]) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000140)=0xffffffffffffff73) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) [ 590.471341][T18442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18442 comm=syz-executor.5 02:48:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2200000000000000) 02:48:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x40) 02:48:41 executing program 4: bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)={@initdev, @multicast1}, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000680)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x4, 0x10b000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 02:48:41 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)) 02:48:41 executing program 3: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x2d, 0x40000032, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') 02:48:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x306, @broadcast}, 0x2, {0x2, 0x0, @remote}, 'ipvlan0\x00'}) 02:48:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x0, 0x0, 0x0, 0xe95, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) 02:48:41 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0xd47b}, 0x0, &(0x7f00000003c0)={0x0, r0+60000000}, 0x0) [ 590.581018][T18452] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #64 02:48:41 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)) 02:48:41 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d08, &(0x7f0000001140)=0x6) 02:48:41 executing program 2: openat$vmci(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) [ 590.669158][T18456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18456 comm=syz-executor.5 02:48:41 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 590.732996][T18456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 590.865770][T18468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18468 comm=syz-executor.5 02:48:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2400000000000000) 02:48:41 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x4}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000003c0)) 02:48:41 executing program 4: syz_mount_image$nilfs2(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) syz_mount_image$nilfs2(0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0x0, 0x0) 02:48:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x11, 0x0, 0x0, 0x0) 02:48:41 executing program 2: setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000480)={{0x0, @loopback, 0x0, 0x0, 'nq\x00'}, {@private}}, 0x44) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) 02:48:41 executing program 1: fanotify_mark(0xffffffffffffffff, 0x45, 0x1000000, 0xffffffffffffffff, 0x0) 02:48:41 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)={@multicast1, @multicast1}, 0x10) [ 591.004280][T18479] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 02:48:41 executing program 0: syz_clone(0x4000, 0x0, 0x0, &(0x7f0000001080), 0x0, 0x0) 02:48:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x541b, 0x0) 02:48:41 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0xd47b}, 0x0, &(0x7f00000003c0)={r0}, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) 02:48:41 executing program 2: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000002600), &(0x7f0000002640)='./file0\x00', 0x0, 0x3, &(0x7f0000002980)=[{&(0x7f0000002680)="8ff6ddb68fe26f66d9833569249ffb621c20bbfdca1b8f773237816196", 0x1d, 0x705}, {0x0}, {&(0x7f00000028c0)="0f", 0x1}], 0x8, &(0x7f0000002a00)) [ 591.133896][T18481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18481 comm=syz-executor.5 02:48:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x1, 0x0) dup2(r0, r1) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2}, 0x10) [ 591.239774][T18491] loop2: detected capacity change from 0 to 7 [ 591.298321][T18481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 591.318117][T18491] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 591.382041][T18491] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 591.458416][T18491] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found 02:48:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2500000000000000) 02:48:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f00000014c0)) 02:48:42 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 02:48:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x401c5820, 0x0) 02:48:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x2, 0x0, &(0x7f0000000040)) [ 591.527039][T18491] UDF-fs: Scanning with blocksize 512 failed [ 591.550966][T18491] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 02:48:42 executing program 4: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000300)=[{0x0}], 0x1200091, &(0x7f0000000380)={[{@snapshot}, {}], [{@subj_user}]}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000001600)={0x1, &(0x7f00000015c0)=[{@fixed}]}) syz_mount_image$nilfs2(&(0x7f0000000400), 0x0, 0x66, 0x0, &(0x7f00000014c0), 0x2000400, &(0x7f0000001500)=ANY=[@ANYBLOB="a36f626172726965722c626172726965722c6f726465723d72656c617865642c626172726965722c736e617073686f743d3078303030303030303030303030303030312c6e6f626172726965722c646973636172642c6e6f7265636f766572792c646f6e745f6d6561"]) 02:48:42 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) [ 591.625323][T18491] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 0: 0x0f != 0x00 [ 591.655389][T18491] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 02:48:42 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000d00), 0xff, 0x0) 02:48:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x5, 0x0, 0x0) [ 591.706860][T18491] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 0: 0x0f != 0x00 [ 591.734783][T18506] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 591.782509][T18508] loop4: detected capacity change from 0 to 264192 [ 591.800519][T18491] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 0: 0x0f != 0x00 02:48:42 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$9p(r0, 0x0, 0xfffffffffffffe1b) [ 591.869162][T18491] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 591.913735][T18508] NILFS (loop4): couldn't find nilfs on the device [ 591.957733][T18491] UDF-fs: Scanning with blocksize 1024 failed [ 591.989957][T18491] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 592.030416][T18491] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 0: 0x0f != 0x00 [ 592.075058][T18491] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 592.084653][T18491] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 0: 0x0f != 0x00 [ 592.136230][T18491] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 0: 0x0f != 0x00 [ 592.151161][T18491] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 592.204197][T18491] UDF-fs: Scanning with blocksize 2048 failed [ 592.228481][T18491] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 592.239431][T18491] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 592.249775][T18491] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 592.258130][T18491] UDF-fs: Scanning with blocksize 4096 failed [ 592.264275][T18491] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) 02:48:43 executing program 2: socketpair(0x23, 0x0, 0x120000, &(0x7f0000000000)) 02:48:43 executing program 1: pipe(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x219b) 02:48:43 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0)={0x7}, &(0x7f0000000300)={0xd47b}, 0x0, &(0x7f00000003c0)={0x0, r0+60000000}, &(0x7f0000000440)={&(0x7f0000000400)={[0xffffffff]}, 0x8}) 02:48:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2600000000000000) 02:48:43 executing program 3: r0 = socket(0x18, 0x0, 0x1) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 02:48:43 executing program 4: fanotify_mark(0xffffffffffffffff, 0x55, 0x0, 0xffffffffffffffff, 0x0) 02:48:43 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000080)={{}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) 02:48:43 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x6}}) [ 592.370238][T18525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:43 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @val, {@ipv6}}, 0x0) 02:48:43 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x30040) 02:48:43 executing program 3: syz_mount_image$nilfs2(0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[{&(0x7f00000000c0)="10", 0x1}, {&(0x7f00000003c0)='\v', 0x1, 0xffffffff}], 0x0, 0x0) 02:48:43 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000b40)) 02:48:43 executing program 2: syz_mount_image$nilfs2(0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[{&(0x7f0000000200)='W', 0x1, 0x80000001}, {&(0x7f00000003c0)='\v', 0x1}], 0x0, 0x0) 02:48:43 executing program 1: syz_clone3(&(0x7f00000002c0)={0x40002000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) 02:48:43 executing program 0: socket$inet(0x2, 0xa, 0x0) setrlimit(0x7, &(0x7f0000000000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) 02:48:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2800000000000000) [ 592.695648][T18545] loop3: detected capacity change from 0 to 264192 [ 592.719294][T18551] loop2: detected capacity change from 0 to 264192 02:48:43 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) 02:48:43 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40305829, 0x0) 02:48:43 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000b40)) [ 592.822208][T18555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$can_bcm(r0, 0x0, 0x0) 02:48:43 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 02:48:43 executing program 4: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x450201, 0x0) 02:48:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2900000000000000) 02:48:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0xc0105500, 0x0) 02:48:43 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) [ 593.231269][T18573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:44 executing program 4: syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB=',smackfstran']) 02:48:44 executing program 3: syz_mount_image$nilfs2(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x428) 02:48:44 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00') 02:48:44 executing program 1: ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000000c0)) 02:48:44 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001100), 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB=',smackfstransmute=+-{,']) [ 593.362393][ C1] I/O error, dev loop4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 593.373222][T18583] NILFS (loop4): unable to read secondary superblock (blocksize = 1024) 02:48:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000480)={{0x0, @loopback, 0x0, 0x0, 'nq\x00'}, {@private}}, 0x44) 02:48:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) [ 593.409679][T18583] NILFS (loop4): couldn't find nilfs on the device 02:48:44 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044df9, &(0x7f0000000040)) 02:48:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8038550a, &(0x7f00000000c0)=ANY=[@ANYBLOB='T\"']) 02:48:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2902000000000000) 02:48:44 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x428) [ 593.557002][T18592] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 02:48:44 executing program 3: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2120400, &(0x7f0000001400)) 02:48:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_control={0x2, {0x5}, 0x0, 0x0, &(0x7f0000000300), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:48:44 executing program 0: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x1200091, &(0x7f0000000380)={[], [{@subj_user}]}) [ 593.685709][T18601] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045518, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) [ 593.730877][ C0] I/O error, dev loop1, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 593.741500][T18602] NILFS (loop1): unable to read secondary superblock (blocksize = 1024) [ 593.765288][T18602] NILFS (loop1): couldn't find nilfs on the device 02:48:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40049409, 0x0) 02:48:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @multicast}, 0xc, {0x2, 0x0, @dev}, 'veth1_macvtap\x00'}) 02:48:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000001080)={{0x2, 0x0, @multicast1}, {0x0, @multicast}, 0x4e, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'hsr0\x00'}) 02:48:44 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$9p(r0, 0x0, 0xfffb) 02:48:44 executing program 4: ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) io_uring_setup(0x247c, &(0x7f0000000040)={0x0, 0x37ee, 0x8, 0x0, 0x2e7}) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) 02:48:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2a00000000000000) 02:48:44 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000e00)={0xffffffffffffffff}, 0x4) 02:48:44 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) 02:48:44 executing program 1: syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[], [{@hash}]}) 02:48:44 executing program 0: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x40002000, 0x0, 0x0, 0x0, {0x39}, &(0x7f0000000140)=""/224, 0xe0, 0x0, 0x0}, 0x58) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8094}, 0x40088c0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) 02:48:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x573e, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 02:48:44 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) 02:48:44 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x541b, 0x0) [ 594.146732][T18635] nfs4: Unknown parameter 'hash' 02:48:44 executing program 4: syz_mount_image$nilfs2(0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000000200)='W', 0x1, 0x80000001}], 0x0, 0x0) 02:48:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2c00000000000000) 02:48:44 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x19, 0x0, 0x0) 02:48:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 02:48:45 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) pselect6(0x40, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x6a}, &(0x7f0000000300)={0xd47b}, 0x0, &(0x7f00000003c0)={r0}, &(0x7f0000000440)={&(0x7f0000000400)={[0xffffffff]}, 0x8}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) [ 594.348176][T18648] loop4: detected capacity change from 0 to 264192 02:48:45 executing program 3: syz_mount_image$nilfs2(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 02:48:45 executing program 1: syz_mount_image$nilfs2(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0xe03d098eca799daa, &(0x7f0000001880)) [ 594.390943][T18650] selinux_netlink_send: 13 callbacks suppressed [ 594.390963][T18650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18650 comm=syz-executor.5 02:48:45 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000540)) [ 594.483830][T18658] __nla_validate_parse: 1 callbacks suppressed [ 594.483848][T18658] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:45 executing program 0: syz_open_dev$audion(&(0x7f00000005c0), 0x0, 0x88400) 02:48:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0xc, 0x0, 0x0) 02:48:45 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) 02:48:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0xfffffffffffffffc, 0x0) 02:48:45 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x800}, 0x4) [ 594.697578][T18665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18665 comm=syz-executor.5 02:48:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2d00000000000000) 02:48:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) 02:48:45 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x25, 0x0, 0x0) 02:48:45 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 02:48:45 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) 02:48:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 02:48:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x802c550a, &(0x7f0000000000)) 02:48:45 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 02:48:45 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) 02:48:45 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 02:48:45 executing program 3: openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000f80)='io.pressure\x00', 0x2, 0x0) [ 594.936934][T18683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18683 comm=syz-executor.5 02:48:45 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x0, 0xb00}, {0xffffffffffffffff, 0x4b57, 0x64}], 0x2, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) [ 595.016361][T18683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 595.131087][T18699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18699 comm=syz-executor.5 02:48:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x2e00000000000000) 02:48:45 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x320, 0xf0}) 02:48:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x380, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 02:48:45 executing program 3: syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000200)}], 0x2001000, &(0x7f0000000400)={[{@discard}, {@nodiscard}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}) 02:48:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@rights, @rights], 0x20}, 0x0) [ 595.239996][ T26] audit: type=1400 audit(1644461325.958:1008): avc: denied { ioctl } for pid=18702 comm="syz-executor.0" path="/dev/fb0" dev="devtmpfs" ino=626 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 02:48:46 executing program 3: syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f00000015c0)={[], [{@smackfshat={'smackfshat', 0x3d, '['}}, {@uid_eq}]}) 02:48:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x5, &(0x7f0000000040)='x', 0x1) [ 595.298992][T18710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18710 comm=syz-executor.5 [ 595.299635][T18710] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x3000000000000000) [ 595.412567][T18710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18710 comm=syz-executor.5 02:48:46 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x2001000, &(0x7f0000000400)) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) [ 595.534201][ C1] I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 595.536936][T18716] NILFS (loop3): unable to read secondary superblock (blocksize = 1024) [ 595.537005][T18716] NILFS (loop3): couldn't find nilfs on the device [ 595.653773][T18720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18720 comm=syz-executor.5 02:48:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x6, &(0x7f0000000040)='x', 0x1) 02:48:46 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000003c0)={'nat\x00'}, &(0x7f0000000440)=0x54) [ 595.659377][T18720] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 595.794658][T18723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18723 comm=syz-executor.5 02:48:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x2, {0x2, 0x0, @remote}, 'ipvlan0\x00'}) 02:48:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x7, &(0x7f0000000040)='x', 0x1) 02:48:46 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) connect$802154_dgram(r0, &(0x7f0000000a40)={0x24, @long}, 0x14) 02:48:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x3100000000000000) 02:48:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x11, 0x0, 0x0) 02:48:46 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000002c0)=ANY=[]) 02:48:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x3f) [ 596.103968][T18734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18734 comm=syz-executor.5 02:48:46 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 02:48:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') read$ptp(r0, 0x0, 0x0) 02:48:46 executing program 2: syz_clone(0x44144000, 0x0, 0x0, 0x0, 0x0, 0x0) 02:48:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x573e, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) [ 596.201068][T18734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:47 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000d40)) 02:48:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x8004550f, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) 02:48:47 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) accept$inet(r0, 0x0, 0x0) 02:48:47 executing program 4: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000780)={[{@nodiscard}, {@order_relaxed}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_lt}, {@subj_type={'subj_type', 0x3d, 'defcontext'}}, {@audit}, {@fsname={'fsname', 0x3d, ':([\xb3\xfbZG\x9a\x1fc\xf2\xa7\xee\x10O\xec\x8d\x8e\xb3\x9a\xcb$\t$\xbf9\x161\x8b\xc5%\xb2d\xc1>m\x98Z\xf5\xdf\xa4\vQlv\x94\xe2G\xfd\bd\xe4\xed\xee\xc8w\xe2\v\xc4\xdf[\x86n\xed\x1e{\xe0\xea\\\xf3\xbd\xe1t\xe5C\xd5\xed\x81\x11\xe1k\x83\xa6DP\xb7\x03\xb3Y&\x91\x9ay\x96i\x0e\xcag\x859\x7f6\'\x87-B\xce\x1a'}}, {@dont_appraise}]}) [ 596.389103][ T26] audit: type=1400 audit(1644461327.108:1009): avc: denied { accept } for pid=18757 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 596.452209][T18751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18751 comm=syz-executor.5 [ 596.555402][ C1] I/O error, dev loop4, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 596.567886][T18760] NILFS (loop4): unable to read secondary superblock (blocksize = 1024) [ 596.585253][T18760] NILFS (loop4): couldn't find nilfs on the device 02:48:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x3200000000000000) 02:48:47 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x2ecf6000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) write$binfmt_script(0xffffffffffffffff, 0x0, 0x3af4701e) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) 02:48:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 02:48:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x4}}) 02:48:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x4}}) 02:48:47 executing program 1: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x1200091, &(0x7f0000000380)) [ 596.705596][ T26] audit: type=1804 audit(1644461327.418:1010): pid=18766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4131448693/syzkaller.5KPPr1/980/memory.events" dev="sda1" ino=1162 res=1 errno=0 [ 596.825724][T18769] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 596.880438][ T26] audit: type=1800 audit(1644461327.458:1011): pid=18766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1162 res=0 errno=0 [ 596.912134][ C0] I/O error, dev loop1, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 02:48:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 02:48:47 executing program 4: fanotify_mark(0xffffffffffffffff, 0x45, 0x28, 0xffffffffffffffff, 0x0) 02:48:47 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000009300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000094c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7b0, 0x0) 02:48:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14}, 0xfff7}}, 0x0) [ 596.936567][T18773] NILFS (loop1): unable to read secondary superblock (blocksize = 1024) 02:48:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x3300000000000000) 02:48:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0xd, &(0x7f0000000040)='x', 0x1) 02:48:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 597.009115][T18773] NILFS (loop1): couldn't find nilfs on the device 02:48:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@private, @dev}, 0xc) 02:48:47 executing program 1: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000001c0)=""/179) 02:48:47 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x41, 0x8001003, 0xffffffffffffffff, 0x0) [ 597.143140][T18786] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 597.145042][T18788] usb usb9: usbfs: process 18788 (syz-executor.4) did not claim interface 0 before use 02:48:47 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x204000, 0x0) write$cgroup_int(r0, 0x0, 0x0) 02:48:47 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) pselect6(0x40, &(0x7f00000002c0)={0x7}, &(0x7f0000000300)={0xd47b}, 0x0, &(0x7f00000003c0)={r0}, &(0x7f0000000440)={&(0x7f0000000400)={[0xffffffff]}, 0x8}) 02:48:48 executing program 4: openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000000)) 02:48:48 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000640)={{0xe7ce1e43e331666f}}) 02:48:48 executing program 3: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x80, 0x10000000, 0xffffffffffffffff, 0x0) 02:48:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x3400000000000000) 02:48:48 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) 02:48:48 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 02:48:48 executing program 3: mq_unlink(&(0x7f0000000000)='nilfs2\x00') 02:48:48 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$9p(r0, 0x0, 0x0) 02:48:48 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000940), 0xffffffffffffffff) [ 597.510922][T18810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:48 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 02:48:48 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020) 02:48:48 executing program 2: clock_gettime(0x0, &(0x7f00000013c0)) 02:48:48 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r0, &(0x7f00000001c0)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0xee01}}, 0xa0) write$P9_RLOCK(r0, &(0x7f0000000080)={0x8}, 0x41) 02:48:48 executing program 3: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, r0+60000000}, &(0x7f0000000440)={0x0}) 02:48:48 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0x1}}) 02:48:48 executing program 1: pselect6(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) 02:48:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x3601000000000000) 02:48:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x88) 02:48:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}}, 0x4c800) 02:48:48 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)) 02:48:48 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) 02:48:48 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) [ 597.915524][T18839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:48 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) 02:48:48 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000004400)='/proc/bus/input/handlers\x00', 0x0, 0x0) 02:48:48 executing program 4: mount$fuse(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x2800450, &(0x7f0000000240)) [ 598.155061][T18855] fuse: Bad value for 'fd' 02:48:49 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001840)={0x1, &(0x7f0000001800)=[{0x1ff}]}) 02:48:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x3a00000000000000) [ 598.371367][T18857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:49 executing program 1: socket(0x0, 0xfffa434cdd473742, 0x0) 02:48:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 02:48:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) 02:48:49 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) 02:48:49 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x8}, 0x0, &(0x7f0000000080)={0x1f}, &(0x7f0000000100)) 02:48:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x3e00000000000000) 02:48:49 executing program 0: io_setup(0x8, &(0x7f00000001c0)) 02:48:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4735254f1ddcb317}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x8}, 0x14}}, 0x0) 02:48:49 executing program 4: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r1, 0x0, r0) 02:48:49 executing program 3: io_setup(0xfff, &(0x7f0000000000)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}) 02:48:49 executing program 1: write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) 02:48:49 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 02:48:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4200000000000000) 02:48:49 executing program 0: mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}) 02:48:49 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001840)={0x4, &(0x7f0000001800)=[{0x0, 0x0, 0x7, 0x7b5f}, {0x7}, {0x4, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x7}]}) 02:48:49 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 02:48:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0xfff, &(0x7f0000000000)=0x0) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}]) 02:48:49 executing program 2: mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}) 02:48:49 executing program 0: memfd_create(&(0x7f0000001e40)='%-!m({\x00', 0x0) 02:48:50 executing program 3: mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x9) 02:48:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@loopback, @private2, @empty, 0x0, 0x8000}) 02:48:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, 0x9}, 0x1c) 02:48:50 executing program 2: syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f626172726965722c6f726465723d72656c617865642c6e6f7265636f766572792c7375626a5f747970653d2c646f6e745f61707072616973652c7375626a5f747970653d5d2c6673757569643d31625a32615165392d363139312d013639342d633762322d35623862306335392c736d61636b66736465663d2c2c7375626a5f757365723d402f2c736d61636b6673666c6f6f723d2c"]) [ 599.421088][T18899] selinux_netlink_send: 13 callbacks suppressed [ 599.421108][T18899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18899 comm=syz-executor.5 [ 599.444548][ T26] audit: type=1326 audit(1644461330.168:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18888 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f424c75e059 code=0x0 02:48:50 executing program 4: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0xb39d}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 02:48:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4300000000000000) 02:48:50 executing program 3: getresuid(&(0x7f0000002040), &(0x7f0000002080), &(0x7f00000020c0)) [ 599.606950][ C1] I/O error, dev loop2, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 599.617677][T18908] NILFS (loop2): unable to read secondary superblock (blocksize = 1024) 02:48:50 executing program 1: io_setup(0x10000, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 02:48:50 executing program 0: syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x9}, @release={0x40046306, 0x1}], 0x7f, 0x0, &(0x7f0000000080)="a1f42dcbb29bf366c0677950d3bf82152d14cbc2baefb6f7a71a2dbda7025c4ba19ab587149541a3c7e720d14d187bc9bc9a47ce8f248f6e75d2478fb2f61a8b282e88248b0135c18b0e3416c3957e5b06cbc5edb399577629b00c91931510ab8a623553af53ec680cbc86100acf4beb8618e128120861823f615c9570e24f"}) 02:48:50 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001840)={0x2, &(0x7f0000001800)=[{}, {0x6}]}) [ 599.682390][T18908] NILFS (loop2): couldn't find nilfs on the device 02:48:50 executing program 4: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) [ 599.762339][T18917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18917 comm=syz-executor.5 [ 599.841080][ T26] audit: type=1326 audit(1644461330.558:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18920 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0414c9f059 code=0x0 02:48:50 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 02:48:50 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) [ 599.910845][T18917] __nla_validate_parse: 2 callbacks suppressed [ 599.910864][T18917] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:50 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001500), &(0x7f0000001580)={&(0x7f0000001540), 0x8}) 02:48:50 executing program 0: io_setup(0x10000, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}]) 02:48:50 executing program 2: select(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0x81}, &(0x7f0000000340)={0x2}, &(0x7f0000000380)={0x77359400}) 02:48:50 executing program 3: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) [ 600.193207][T18935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18935 comm=syz-executor.5 02:48:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4800000000000000) 02:48:51 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='com.apple.system.Security\x00', 0x0, 0x0) 02:48:51 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 02:48:51 executing program 2: select(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0x81}, &(0x7f0000000340)={0x2}, &(0x7f0000000380)={0x77359400}) 02:48:51 executing program 3: pipe2(0x0, 0xc00) 02:48:51 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f0000000100)) 02:48:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x548, 0xffffffff, 0x360, 0x288, 0x360, 0xffffffff, 0xffffffff, 0x478, 0x478, 0x478, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x160, 0x288, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0xa}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty, @remote}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:autofs_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@mcast2, @mcast2, [], [], 'batadv_slave_0\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ecda3c7f1207264e666d11e0f307045c60aef2628d8c9dd26f51ed1089bc834a696c580a7cd0417d9cdd3ef73fd7c5ca8c5960e3b5f9d31fa0d5b4eda7e40e75"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 02:48:51 executing program 2: select(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0x81}, &(0x7f0000000340)={0x2}, &(0x7f0000000380)={0x77359400}) 02:48:51 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/mnt\x00') 02:48:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @remote}}, 0x5c) [ 600.412354][T18951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18951 comm=syz-executor.5 02:48:51 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) fgetxattr(r0, &(0x7f0000000640)=@known='security.apparmor\x00', &(0x7f0000000700)=""/82, 0x52) [ 600.509714][T18951] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 600.530619][T18960] x_tables: duplicate underflow at hook 2 02:48:51 executing program 3: set_mempolicy(0x1, &(0x7f0000000000)=0x3f, 0x6) [ 600.748380][T18965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18965 comm=syz-executor.5 02:48:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4900000000000000) 02:48:51 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001580)={&(0x7f0000001540)={[0x2e]}, 0x8}) 02:48:51 executing program 2: select(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0x81}, &(0x7f0000000340)={0x2}, &(0x7f0000000380)={0x77359400}) 02:48:51 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) 02:48:51 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)={0x0, 0x0, 0x10}, 0x10) 02:48:51 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 02:48:51 executing program 2: clock_gettime(0x3, &(0x7f00000013c0)) clock_gettime(0x0, &(0x7f0000001800)) 02:48:51 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x1a000, 0x0) 02:48:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0xffffffff, 'bridge0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local}}}, {{@ip={@local, @dev, 0x0, 0x0, 'wlan0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 02:48:51 executing program 1: io_setup(0xfff, &(0x7f0000000000)=0x0) io_getevents(r0, 0x10001, 0x0, 0x0, 0x0) 02:48:51 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x83, 0x0) [ 601.021040][T18983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18983 comm=syz-executor.5 02:48:51 executing program 2: io_setup(0x10000, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 601.064700][T18988] x_tables: duplicate underflow at hook 3 [ 601.072373][T18990] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 601.242997][T18993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18993 comm=syz-executor.5 02:48:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4a00000000000000) 02:48:52 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) 02:48:52 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001840)={0x4, &(0x7f0000001800)=[{0x0, 0x4, 0x7}, {0x7, 0x4, 0x0, 0x2}, {0x4, 0x0, 0xed, 0x3}, {0x6, 0x0, 0x9, 0x7}]}) 02:48:52 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000840), 0xffffffffffffffff) 02:48:52 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) 02:48:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 02:48:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001840)={0x2, &(0x7f0000001800)=[{}, {}]}) [ 601.359225][ T26] audit: type=1326 audit(1644461332.078:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18995 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f424c75e059 code=0x0 02:48:52 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)={0x10}, 0x10) 02:48:52 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 02:48:52 executing program 4: openat$zero(0xffffffffffffff9c, 0x0, 0x53d900, 0x0) [ 601.474431][T19005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19005 comm=syz-executor.5 02:48:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@empty, @loopback, @mcast2}) [ 601.533208][T19005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:52 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000003c0)='system_u:object_r:var_run_t:s0\x00', 0x1f) [ 601.713163][T19018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19018 comm=syz-executor.5 02:48:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4c00000000000000) 02:48:52 executing program 1: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002fc0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 02:48:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x650, 0x0, 0xe8, 0xffffffff, 0x1d8, 0x460, 0x580, 0x580, 0xffffffff, 0x580, 0x580, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x160, 0x288, 0x0, {}, [@common=@inet=@tos={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:crash_device_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @private0, [], [], 'ip_vti0\x00', 'vxcan1\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@local, @ipv4=@multicast2, @icmp_id, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0) 02:48:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x305040, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 02:48:52 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000003c0)='system_u:object_r:var_run_t:s0\x00', 0x1f) 02:48:52 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) [ 601.844385][T19026] x_tables: duplicate underflow at hook 1 02:48:52 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000000)) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000003c0)=""/4096) 02:48:52 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) 02:48:52 executing program 1: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/129) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000000c0)=""/31) 02:48:52 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 02:48:52 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000003c0)='system_u:object_r:var_run_t:s0\x00', 0x1f) [ 602.019711][T19036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19036 comm=syz-executor.5 02:48:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x438, 0x4e8, 0x388, 0xffffffff, 0x4e8, 0x388, 0x5d8, 0x5d8, 0xffffffff, 0x5d8, 0x5d8, 0x5, 0x0, {[{{@ipv6={@mcast2, @dev, [], [], 'veth0_to_batadv\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0xa}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private2, @remote, [], [], 'veth1_to_bond\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv4=@multicast2, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) [ 602.091209][T19036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4e00000000000000) 02:48:53 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001840)={0x4, &(0x7f0000001800)=[{}, {0x7}, {0x4}, {0x6}]}) 02:48:53 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x6, 0x0) 02:48:53 executing program 1: timerfd_create(0xf, 0x0) 02:48:53 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000003c0)='system_u:object_r:var_run_t:s0\x00', 0x1f) 02:48:53 executing program 3: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x7}, 0x0, 0x0) [ 602.335932][ T26] audit: type=1326 audit(1644461333.058:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19047 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f424c75e059 code=0x0 02:48:53 executing program 0: r0 = getpgid(0x0) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 02:48:53 executing program 1: timer_create(0x0, 0x0, &(0x7f0000001100)) timer_gettime(0x0, &(0x7f0000001140)) 02:48:53 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) 02:48:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private=0xa010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@loopback}, 0x0, @in=@empty}}, 0xe8) 02:48:53 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 602.499654][T19060] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x208, 0x208, 0xffffffff, 0x208, 0x208, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0x3f8, 0x5, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @dev, [], [], 'veth0_to_batadv\x00', 'erspan0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4, @ipv6=@mcast1, @gre_key}}}, {{@ipv6={@private2, @remote, [], [], 'veth1_to_bond\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@inet=@SET1}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv4=@multicast2, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x57d) 02:48:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x4f00000000000000) 02:48:53 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) 02:48:53 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000001500), 0x0) 02:48:53 executing program 0: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0xb39d}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x62b]}, 0x8}) 02:48:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0xfffffffffffffcc2) [ 602.807054][T19080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:53 executing program 3: clock_gettime(0x0, &(0x7f0000000900)) clock_getres(0x2, &(0x7f0000000800)) 02:48:53 executing program 4: mount$fuseblk(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 02:48:53 executing program 2: io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r0, 0x0, 0x0) 02:48:53 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x8}, 0x0, &(0x7f0000000080)={0x1f}, 0x0) 02:48:53 executing program 1: io_setup(0x10000, &(0x7f0000000000)=0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0xffffffffffffff8e}]) 02:48:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5000000000000000) 02:48:53 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 02:48:53 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) [ 603.217698][T19092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:54 executing program 2: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r1, 0x406, r0) 02:48:54 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x305040, 0x0) 02:48:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0xfff, &(0x7f0000000000)=0x0) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 02:48:54 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) fgetxattr(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='u'], 0x0, 0x0) 02:48:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5100000000000000) 02:48:54 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x24180, 0x0) 02:48:54 executing program 1: select(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0x81}, 0x0, &(0x7f0000000380)={0x77359400}) 02:48:54 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 02:48:54 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) 02:48:54 executing program 3: timer_create(0x2, 0x0, &(0x7f0000001100)) timer_gettime(0x0, &(0x7f0000001140)) 02:48:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0), 0x8) [ 603.621668][T19115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:54 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000), 0xfffffffffffffdcc) 02:48:54 executing program 4: mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 02:48:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, "6d9e4728"}, &(0x7f0000001040)=0x28) 02:48:54 executing program 3: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/129) 02:48:54 executing program 4: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) 02:48:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5200000000000000) 02:48:54 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000fef000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 02:48:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x48) 02:48:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x70) 02:48:54 executing program 3: fanotify_mark(0xffffffffffffffff, 0x90, 0x40000002, 0xffffffffffffffff, 0x0) 02:48:54 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 02:48:54 executing program 4: socket$inet_icmp(0x2, 0x2, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0xa0202, 0x0) 02:48:54 executing program 2: sched_rr_get_interval(0x0, &(0x7f0000000000)) clock_gettime(0x3, &(0x7f00000013c0)) [ 603.982105][T19143] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@empty, @loopback, @mcast2, 0x0, 0x0, 0x0, 0x700}) 02:48:54 executing program 3: shmget(0x0, 0x11000, 0x0, &(0x7f0000fef000/0x11000)=nil) 02:48:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@loopback}, 0x0, @in=@empty}}, 0xe8) 02:48:54 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/zoneinfo\x00', 0x0, 0x0) 02:48:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5400000000000000) 02:48:54 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) fanotify_mark(r0, 0x5, 0x1, 0xffffffffffffffff, 0x0) 02:48:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001840)={0x4, &(0x7f0000001800)=[{0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x2}, {0x4}, {0x6}]}) 02:48:54 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0}, 0x38) 02:48:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 02:48:55 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) [ 604.293467][ T26] audit: type=1326 audit(1644461335.008:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19165 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd261bbf059 code=0x0 02:48:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, &(0x7f0000000080), 0x8) 02:48:55 executing program 0: io_setup(0x10000, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[0x0]) 02:48:55 executing program 3: select(0x40, &(0x7f00000002c0), &(0x7f0000000300)={0x81}, 0x0, 0x0) 02:48:55 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) fgetxattr(r0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0) 02:48:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x104, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 02:48:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x14, &(0x7f0000000680)={0x1, [0x3]}, 0x6) [ 604.539230][T19183] selinux_netlink_send: 12 callbacks suppressed [ 604.539249][T19183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19183 comm=syz-executor.5 02:48:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5500000000000000) 02:48:55 executing program 1: open$dir(&(0x7f0000002300)='./file0\x00', 0x200, 0x0) 02:48:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r4, &(0x7f00000001c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x13, &(0x7f00000005c0)={r3}, 0x8) 02:48:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000000f00)={&(0x7f0000000040)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x200}, 0x0) 02:48:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x14) 02:48:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000001500), 0x90) 02:48:55 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x1d, &(0x7f0000000000)={0x0, 0x1}, 0x8) [ 604.803692][T19202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19202 comm=syz-executor.5 02:48:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000000), 0x88) 02:48:55 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000180)=@un=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="6000000000000000ffff00b96c807467652d5921e21ca98ab3be35788b75ed96cfff766c6b5a6b2f132551059a0d175b21ed10ce76f77d43e40f763fcf044cf712713ac6a84491ccbb9f431c2809229f7544871119bd4cef8f3109b81f5348eb9f"], 0xd8}, 0x0) [ 604.917028][T19202] __nla_validate_parse: 1 callbacks suppressed [ 604.917048][T19202] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:55 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x1}, 0x1c) r1 = dup(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000180), &(0x7f0000001600)=0x8) 02:48:55 executing program 0: openat(0xffffffffffffffff, 0x0, 0x8092eff92ebc3102, 0x0) 02:48:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000000)=ANY=[@ANYRES32], 0x1c) [ 605.140914][T19224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19224 comm=syz-executor.5 02:48:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5600000000000000) 02:48:55 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x107, &(0x7f00000001c0), &(0x7f0000000200)=0x18) 02:48:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x5, &(0x7f00000004c0)=0x7, 0x4) 02:48:55 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x13, &(0x7f00000005c0)={0x0, 0x0, 0x1, "d7"}, 0x9) dup2(r0, r1) 02:48:55 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000200)=0x4) 02:48:55 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) connect$inet(r1, &(0x7f0000000180)={0x10, 0x2}, 0x10) 02:48:56 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, &(0x7f0000000080), &(0x7f0000000140)=0x90) [ 605.376430][T19248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19248 comm=syz-executor.5 02:48:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000), 0x88) 02:48:56 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="6000000000000000ffff00b96c807467652d5921e21ca98ab3be35788b75ed96cfff766c6b5a6b2f132551059a0d175b21ed10ce76f77d43e40f763fcf044cf712713ac6a84491ccbb9f431c2809229f7544871119bd4cef8f3109b81f5348eb9f"], 0xd8}, 0x0) [ 605.436309][T19248] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:56 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x107, &(0x7f0000000440), &(0x7f0000000480)=0x18) 02:48:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x0, 0x0, 0xc}, 0x98) 02:48:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x41, 0x0, &(0x7f0000000080)) [ 605.628426][T19258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19258 comm=syz-executor.5 02:48:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/242, 0xf2}, 0x2) 02:48:56 executing program 1: getresgid(&(0x7f00000001c0), 0x0, &(0x7f0000000140)) 02:48:56 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 02:48:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5800000000000000) 02:48:56 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000001840)='cdg\x00', 0x4) 02:48:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000240)={r4}, 0x8) 02:48:56 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[], 0xd8}, 0x0) 02:48:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000300)={0x0, 0x2, "8abe"}, &(0x7f0000000380)=0xa) [ 605.863563][T19278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19278 comm=syz-executor.5 02:48:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffff7}, 0x14) 02:48:56 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) [ 605.971702][T19278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:56 executing program 3: open$dir(0x0, 0x40000400001803bf, 0x0) 02:48:56 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket(0x1c, 0x1, 0x0) dup2(r0, r1) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000000), 0xd) 02:48:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)="bf", 0x1, 0x108, &(0x7f0000001080)={0x10, 0x2}, 0x10) 02:48:56 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000140)='htcp\x00', 0x5) 02:48:56 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) bind(r1, &(0x7f0000000240)=@in={0x10, 0x2}, 0x10) [ 606.147318][T19301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19301 comm=syz-executor.5 02:48:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5900000000000000) 02:48:57 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet(0x2, 0x5, 0x0) dup2(r0, r1) 02:48:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 02:48:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0x98) 02:48:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000180), &(0x7f0000000140)=0x90) 02:48:57 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0x28e}, 0x98) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) 02:48:57 executing program 3: faccessat(0xffffffffffffffff, 0x0, 0x0) [ 606.433205][T19326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19326 comm=syz-executor.5 02:48:57 executing program 1: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000a40)="3f97f235cf626a8b5256184fb070936dde61148318e376533a6fcc0abe712c120d1cc125aae1944c424309faac6e265b05cbe7e3cc17d3e9f1b142967d00bcbf9112b980c701ca27cc4615295d922167a7744761d376696fceb931673fb34ac0ef533b33a007c14f8578eca94ff99bde373404c194367a00b82ec283dbf15621cc35583d205785dadb37832a93419ea1521482eb04b3849d81", 0x99, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) shutdown(r0, 0x1) 02:48:57 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 606.490949][T19326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:57 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x1f, &(0x7f0000000200), &(0x7f0000000240)=0x4) 02:48:57 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000100)) 02:48:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xb) [ 606.684083][T19341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19341 comm=syz-executor.5 02:48:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5a00000000000000) 02:48:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000180), &(0x7f00000001c0)=0x8) 02:48:57 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg(r1, &(0x7f0000001c00)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000000140)="a9", 0x1}], 0x1, &(0x7f0000001a00)=[{0x10}, {0x10}], 0x20}, 0x0) 02:48:57 executing program 0: pipe2(&(0x7f0000001340)={0xffffffffffffffff}, 0x0) fstat(r0, &(0x7f0000000000)) 02:48:57 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) writev(r0, 0x0, 0x0) 02:48:57 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x1}, 0x1c) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 02:48:57 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), 0x90) 02:48:57 executing program 0: open$dir(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) [ 606.928751][T19366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19366 comm=syz-executor.5 02:48:57 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, &(0x7f0000000240), 0x90) [ 606.997787][T19366] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x104, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 02:48:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x0, 0x1, 0x0, 0x0) 02:48:57 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x3, &(0x7f0000000000)={0xfffa, 0x1ff, 0x7, 0x5}, 0x8) 02:48:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5c00000000000000) 02:48:57 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 02:48:58 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 02:48:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = dup2(r2, r0) connect$inet(r3, &(0x7f00000001c0)={0xfffffffffffffe3b, 0x2}, 0x10) 02:48:58 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000), 0x10) 02:48:58 executing program 1: pipe2(&(0x7f0000001340)={0xffffffffffffffff}, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0xa}, 0xa) 02:48:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0x101, &(0x7f0000000000), &(0x7f00000000c0)=0x98) [ 607.346605][T19396] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:58 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002faff00200000fe0000000000000000000000000000bbff0200000000000000000000000000013a"], 0x0) 02:48:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000001600), &(0x7f00000016c0)=0x88) 02:48:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, &(0x7f0000000000)={0xffffffff, {{0x10, 0x2}}}, 0x88) 02:48:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) 02:48:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000000)=@in6={0x0, 0x1c, 0x3}, 0x2) 02:48:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0x40, &(0x7f0000000040)='htcp\x00', 0x5) 02:48:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5e00000000000000) 02:48:58 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000000)={0x40, 0x7f}, 0x8) dup2(r0, r1) 02:48:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000000c0), &(0x7f0000000040)=0x98) 02:48:58 executing program 1: getresgid(0x0, &(0x7f0000000040), &(0x7f0000000080)) 02:48:58 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) bind(r1, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 02:48:58 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='{', 0x1, 0x2018c, 0x0, 0x0) [ 607.691073][T19428] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:58 executing program 0: accept$unix(0xffffffffffffffff, &(0x7f0000000140), 0x0) 02:48:58 executing program 1: r0 = socket(0x1c, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000580)=ANY=[@ANYRES32], 0x3ef) 02:48:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x7fffffff}, 0x10) 02:48:58 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) shutdown(r0, 0x0) 02:48:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x5f00000000000000) 02:48:58 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[{0x10}], 0x10}, 0x0) 02:48:58 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, &(0x7f0000001500), 0x90) 02:48:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000005c0), 0x8) 02:48:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)) [ 608.093928][T19463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x10) 02:48:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x3, &(0x7f0000000000), 0x8) 02:48:58 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3) 02:48:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x2}, 0x10) 02:48:59 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f00000000c0), &(0x7f0000000040)=0x8) 02:48:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6000000000000000) 02:48:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000000)=ANY=[], 0x1c) 02:48:59 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 02:48:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept$inet(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 02:48:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140), &(0x7f0000000040)=0x98) 02:48:59 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x14, &(0x7f0000000680)={0x2, [0x3, 0x0]}, 0x8) [ 608.460544][T19490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 02:48:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000100), &(0x7f00000001c0)=0x98) 02:48:59 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000001500), 0x90) 02:48:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000480), &(0x7f00000004c0)=0x18) 02:48:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6400000000000000) 02:48:59 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) shutdown(r0, 0x1) 02:48:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 02:48:59 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0x100, &(0x7f0000000000), &(0x7f00000000c0)=0xb0) 02:48:59 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f00000000c0), 0x8) 02:48:59 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r2 = socket(0x2, 0x1, 0x0) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) r4 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x19, &(0x7f00000000c0), 0x8) [ 608.816500][T19521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:48:59 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000180)=@un=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000001880)=ANY=[], 0xd8}, 0x0) 02:48:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x6, 0x0, 0xa}, 0x98) 02:48:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0xd) 02:48:59 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xc2) 02:48:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6500000000000000) 02:48:59 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) bind(r1, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 02:48:59 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 02:48:59 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 02:48:59 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000140)) 02:48:59 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000080), 0xc) 02:49:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f0000000000)={0x10, 0x2}, 0x10) 02:49:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6558000000000000) 02:49:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r2 = socket$inet6_sctp(0x1c, 0x1, 0x84) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000005c0)={r4}, 0x8) 02:49:00 executing program 2: getresuid(0x0, 0x0, &(0x7f0000001b00)) 02:49:00 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000140)={0x0, @in, 0x0, 0x0, 0x28e}, 0x98) 02:49:00 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0x40, &(0x7f0000000080)='cubic\x00', 0x6) 02:49:00 executing program 1: pipe2(&(0x7f0000001340)={0xffffffffffffffff}, 0x0) fcntl$setown(r0, 0x6, 0xffffffffffffffff) 02:49:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) dup2(r0, r1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) [ 609.627888][T19577] selinux_netlink_send: 14 callbacks suppressed [ 609.627908][T19577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19577 comm=syz-executor.5 02:49:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffff7, 0x4}, 0x14) 02:49:00 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x14) 02:49:00 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f00000001c0), 0x14) 02:49:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6600000000000000) 02:49:00 executing program 1: clock_gettime(0x0, &(0x7f0000000040)) clock_settime(0x0, &(0x7f0000000080)) 02:49:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000000f00)={&(0x7f0000000040)=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6800000000000000ffff000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="10", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffff9c, @ANYRES32=0xffffffffffffff9c, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00h\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00h', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xffffffffffffff9c, @ANYRES32, @ANYBLOB="000000002000000000000000030000000100000018224f5c3eb045efee7c58b37127589a75"], 0x200}, 0x0) 02:49:00 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 02:49:00 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f00000016c0), &(0x7f0000001700)=0x8) [ 609.909020][T19615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19615 comm=syz-executor.5 02:49:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f0000000100)={0x10, 0x2}, 0x10) 02:49:00 executing program 4: getresuid(0x0, &(0x7f0000001ac0), 0x0) 02:49:00 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f00000028c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c) [ 609.983176][T19621] __nla_validate_parse: 2 callbacks suppressed [ 609.983195][T19621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 02:49:00 executing program 2: r0 = socket(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 02:49:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) dup(0xffffffffffffffff) 02:49:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='>', 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) [ 610.177298][T19636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19636 comm=syz-executor.5 02:49:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6800000000000000) 02:49:01 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0xc) 02:49:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 02:49:01 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000}, 0x2) 02:49:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0xa, 0x0, 0x7fff}, 0x98) 02:49:01 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x901, &(0x7f0000000040), &(0x7f00000001c0)=0x8) 02:49:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000300), &(0x7f0000000380)=0x8) [ 610.423645][T19658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19658 comm=syz-executor.5 02:49:01 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000080)='a', 0x1}, {&(0x7f00000004c0)="640968c8e17c240ab00ec6ff614f7a99f41dcff1f5da72d20eb61437d1fed14ca75a25380acad390d4d4ac2f337fcd49170724c11d0e280c3214adaba89f930cc9096c4a158c6b4af401b6251a4bec8e832ce13284142d5bc5a25b422e0dc89fc4b89430e1b2d8041c7f04b39f4bc7af6ba785c5c1e3e4e4f2bddc63061208e3747e7891efdaf8deedac3026bedf734dc381113727b730e038f19f26b1ca2cfa196b3601373bb1765b086204b34e1252804f9fcb92570bfdc1e817985d3c14a78eaaa059965cce1cde450a5df175978b799f81cb14df587cf369060bc4fa33", 0xdf}, {&(0x7f0000001b00)="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", 0x3dd}], 0x3}, 0x0) shutdown(r0, 0x1) [ 610.477189][T19665] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:01 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 02:49:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x8) 02:49:01 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket(0x1c, 0x1, 0x0) dup2(r0, r1) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x15, &(0x7f00000000c0), 0x8) 02:49:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000001600), &(0x7f00000016c0)=0xfd0d) [ 610.702050][T19671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19671 comm=syz-executor.5 02:49:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6900000000000000) 02:49:01 executing program 0: getresuid(&(0x7f0000001a80), &(0x7f0000001ac0), 0x0) 02:49:01 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000180), &(0x7f0000001600)=0x8) 02:49:01 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) connect(r1, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 02:49:01 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x273}, 0x14) 02:49:01 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, @in, 0x0, 0x0, 0x104}, 0x98) 02:49:01 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000180), &(0x7f00000001c0)=0xc) [ 610.920977][T19695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19695 comm=syz-executor.5 [ 610.995638][T19695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:01 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xd, &(0x7f0000000000)=0x8, 0x4) 02:49:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000102"], 0x9) 02:49:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x1ff}, 0x8) 02:49:01 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x1d, &(0x7f0000000000), 0x8) [ 611.157661][T19695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19695 comm=syz-executor.5 02:49:01 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/64, 0x40}, 0x83) 02:49:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6a00000000000000) 02:49:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r0, &(0x7f0000000300)) 02:49:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080), 0x90) 02:49:02 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f0000000080), 0x8) 02:49:02 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) connect$unix(r1, &(0x7f00000001c0)=@abs={0x8}, 0x8) 02:49:02 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6}, 0x14) 02:49:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x4, &(0x7f0000000000), 0x4) 02:49:02 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x5d) [ 611.440457][T19735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19735 comm=syz-executor.5 [ 611.501579][T19735] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x7}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0xb) 02:49:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x55, 0x0, 0x0) 02:49:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 02:49:02 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='{', 0x1, 0x0, 0x0, 0x0) [ 611.640282][T19754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19754 comm=syz-executor.5 02:49:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6c00000000000000) 02:49:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)=0x3d) 02:49:02 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000cc0)={&(0x7f0000000440)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000480)="b9", 0x1}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="90"], 0x90}, 0x0) 02:49:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200), &(0x7f00000002c0)=0x98) 02:49:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x5}, 0x8) 02:49:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 02:49:02 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x7fffffff, 0x2}, 0x10) 02:49:02 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r4, &(0x7f00000001c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x13, &(0x7f00000005c0)={r3, 0x10}, 0x8) [ 611.903946][T19773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19773 comm=syz-executor.5 02:49:02 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8003}, 0x14) 02:49:02 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000001c0)={0x10, 0x2}, 0x10) dup2(r0, r1) [ 611.989591][T19773] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000005c0), 0x8) 02:49:02 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x83) 02:49:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x6d00000000000000) 02:49:02 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x31, &(0x7f0000000280)=ANY=[], 0xc0) dup2(r0, r1) 02:49:02 executing program 3: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000001180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)) 02:49:02 executing program 4: open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0) 02:49:03 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) r2 = dup(r1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x5, &(0x7f0000000000), 0x4) 02:49:03 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, &(0x7f0000000000)=ANY=[], 0x170) 02:49:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0xb) [ 612.306870][T19804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000100), &(0x7f00000001c0)=0x90) 02:49:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x4) 02:49:03 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) bind$unix(r1, &(0x7f0000000080)=@abs={0x8}, 0x8) 02:49:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000080), 0x90) 02:49:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x7000000000000000) 02:49:03 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000100)=@in={0x10, 0x2}, 0x10) 02:49:03 executing program 3: r0 = socket(0x2, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 02:49:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0x40, &(0x7f0000000080)='cubic\x00', 0x6) [ 612.646524][T19834] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000480), &(0x7f0000000540)=0x98) 02:49:03 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x4b, 0x1c}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000000)) 02:49:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x900, &(0x7f00000005c0), 0x8) 02:49:03 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) connect$inet(r1, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 02:49:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x7100000000000000) 02:49:03 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e3", 0x1}], 0x1, &(0x7f0000000380)=[{0x10}, {0x10}], 0x20}, 0x0) 02:49:03 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2018c, 0x0, 0x0) 02:49:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f0000000300), &(0x7f00000003c0)=0x8) 02:49:03 executing program 4: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000001400)) 02:49:03 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xae, {0x7}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x2, &(0x7f0000000200)=@string={0x2}}]}) [ 613.051811][T19864] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:03 executing program 3: syz_usb_connect$uac1(0x0, 0x101, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206b1d01014000010203010902"], &(0x7f0000000300)={0x0, 0x0, 0x1b, &(0x7f0000000180)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) 02:49:03 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0xae, {0x7, 0x25, 0x1, 0x2, 0x8, 0x8001}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x22, &(0x7f0000000200)=@string={0x22, 0x3, "4584001b78866d500957809e208193e107014b70a3eb9335d65cc8d56e3c7a9a"}}]}) 02:49:03 executing program 0: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=""/70) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xff7d}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {0x0, 0x7, 0x1800}, {0x1, 0x48, 0x1800}, {0x2, 0x3}], 0x4) r1 = semget(0xffffffffffffffff, 0x8, 0x0) r2 = semget(0x2, 0x4, 0x1) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f00000002c0)=""/245) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/17) r3 = semget$private(0x0, 0x4, 0x176) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000340)=""/140) semop(r3, &(0x7f0000000140)=[{0x2, 0xfff, 0x1800}], 0x1) shmctl$IPC_RMID(0x0, 0x0) 02:49:03 executing program 2: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=""/70) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xff7d}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {0x0, 0x7, 0x1800}, {0x1, 0x48, 0x1800}, {0x2, 0x3}], 0x4) r1 = semget(0xffffffffffffffff, 0x8, 0x0) r2 = semget(0x2, 0x4, 0x1) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f00000002c0)=""/245) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/17) r3 = semget$private(0x0, 0x4, 0x176) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000340)=""/140) semop(r3, &(0x7f0000000140)=[{0x2, 0xfff, 0x1800}], 0x1) shmctl$IPC_RMID(0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)) geteuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r4 = getuid() setreuid(0xee01, r4) signalfd(0xffffffffffffffff, &(0x7f0000002240), 0x8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000600)) 02:49:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x7200000000000000) [ 613.336009][T19890] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x7400000000000000) [ 613.463331][T19892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 613.545022][ T4577] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 613.565289][ T3737] usb 4-1: new high-speed USB device number 41 using dummy_hcd 02:49:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x7500000000000000) [ 613.795027][ T4577] usb 5-1: Using ep0 maxpacket: 16 [ 613.805350][ T3737] usb 4-1: Using ep0 maxpacket: 32 [ 613.915239][ T4577] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 613.928491][ T4577] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 613.992588][ T4577] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 614.005419][ T3737] usb 4-1: config 0 has no interfaces? 02:49:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x7600000000000000) 02:49:04 executing program 0: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=""/70) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xff7d}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {0x0, 0x7, 0x1800}, {0x1, 0x48, 0x1800}, {0x2, 0x3}], 0x4) r1 = semget(0xffffffffffffffff, 0x8, 0x0) r2 = semget(0x2, 0x4, 0x1) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f00000002c0)=""/245) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/17) r3 = semget$private(0x0, 0x4, 0x176) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000340)=""/140) semop(r3, &(0x7f0000000140)=[{0x2, 0xfff, 0x1800}], 0x1) shmctl$IPC_RMID(0x0, 0x0) 02:49:04 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/58) [ 614.165555][ T3737] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 614.198818][ T3737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.208775][ T3737] usb 4-1: Product: syz [ 614.236768][ T3737] usb 4-1: Manufacturer: syz 02:49:05 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x1f, 0xbd, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x8001}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000002dc0), 0x0, 0x0) [ 614.260951][ T3737] usb 4-1: SerialNumber: syz [ 614.304484][ T3737] usb 4-1: config 0 descriptor?? [ 614.309879][ T4577] usb 5-1: string descriptor 0 read error: -22 [ 614.323416][ T4577] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 614.371254][ T4577] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.480943][ T4577] usb 5-1: 0:2 : does not exist [ 614.590964][ T4577] usb 4-1: USB disconnect, device number 41 [ 614.684369][ T3737] usb 5-1: USB disconnect, device number 9 [ 614.695225][T11676] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 614.955026][T11676] usb 3-1: Using ep0 maxpacket: 16 [ 615.085092][T11676] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 615.094073][T11676] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 615.104867][T11676] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.345392][T11676] usb 3-1: string descriptor 0 read error: -22 [ 615.352237][T11676] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.361967][T11676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.423689][T11676] usb 3-1: 0:2 : does not exist [ 615.623280][ T3737] usb 3-1: USB disconnect, device number 53 02:49:06 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xa8, 0xfd, 0xa8, 0x8, 0x1199, 0x9001, 0x9914, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xfb, 0xb1, 0xb8, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x10}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) 02:49:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x7a00000000000000) 02:49:06 executing program 0: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=""/70) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xff7d}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {0x0, 0x7, 0x1800}, {0x1, 0x48, 0x1800}, {0x2, 0x3}], 0x4) r1 = semget(0xffffffffffffffff, 0x8, 0x0) r2 = semget(0x2, 0x4, 0x1) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f00000002c0)=""/245) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/17) r3 = semget$private(0x0, 0x4, 0x176) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000340)=""/140) semop(r3, &(0x7f0000000140)=[{0x2, 0xfff, 0x1800}], 0x1) shmctl$IPC_RMID(0x0, 0x0) 02:49:06 executing program 3: syz_usb_connect$uac1(0x2, 0x101, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206b1d01014000010203010902ef0003010410000904000000010100000a24010300030201"], &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300}, 0x1b, &(0x7f0000000180)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa}, @ssp_cap={0xc}]}}) syz_open_dev$hidraw(0x0, 0x0, 0x0) 02:49:06 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0xae, {0x7, 0x25, 0x1, 0x2, 0x8, 0x8001}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x22, &(0x7f0000000200)=@string={0x22, 0x3, "4584001b78866d500957809e208193e107014b70a3eb9335d65cc8d56e3c7a9a"}}]}) 02:49:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/174) [ 616.216908][T19920] selinux_netlink_send: 14 callbacks suppressed [ 616.216927][T19920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19920 comm=syz-executor.5 02:49:07 executing program 2: syz_usb_connect$uac1(0x2, 0x101, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206b1d01014000010203010902"], 0x0) [ 616.288579][T19920] __nla_validate_parse: 2 callbacks suppressed [ 616.288595][T19920] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x8100000000000000) [ 616.350184][T19923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19923 comm=syz-executor.5 [ 616.429952][T19927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19927 comm=syz-executor.5 [ 616.443787][T19927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x8103000000000000) [ 616.480699][T19927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19927 comm=syz-executor.5 [ 616.493761][T11676] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 616.502163][T11675] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 616.566576][T19929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19929 comm=syz-executor.5 [ 616.580242][T19929] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x88a8ffff00000000) [ 616.615188][T11666] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 616.616352][T19929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19929 comm=syz-executor.5 [ 616.689992][T19931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19931 comm=syz-executor.5 [ 616.704536][T19931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x8a02000000000000) [ 616.741817][T19931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19931 comm=syz-executor.5 [ 616.775779][T11675] usb 5-1: Using ep0 maxpacket: 16 [ 616.804698][T19933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19933 comm=syz-executor.5 [ 616.819646][T19933] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x901723f500000000) [ 616.854870][T19933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19933 comm=syz-executor.5 [ 616.895855][T11675] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 616.909584][T11675] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 616.921031][T11675] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 616.934389][T19935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 616.944519][T11676] usb 4-1: not running at top speed; connect to a high speed hub [ 617.026196][T11666] usb 3-1: unable to get BOS descriptor or descriptor too short [ 617.034041][T11676] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 617.044665][T11676] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 617.165238][T11666] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 617.173011][T11675] usb 5-1: string descriptor 0 read error: -22 [ 617.179442][T11675] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 617.189114][T11666] usb 3-1: can't read configurations, error -71 [ 617.195993][T11675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.235198][T11676] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 617.244275][T11676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.252362][T11676] usb 4-1: Product: syz [ 617.259575][T11675] usb 5-1: 0:2 : does not exist [ 617.265301][T11676] usb 4-1: Manufacturer: syz [ 617.269914][T11676] usb 4-1: SerialNumber: syz [ 617.496667][T11675] usb 5-1: USB disconnect, device number 10 [ 617.680634][T11676] usb 4-1: USB disconnect, device number 42 [ 617.716965][ T7344] udevd[7344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 02:49:09 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000040)) 02:49:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x9100000000000000) 02:49:09 executing program 0: semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=""/70) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0xff7d}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x4}, {0x0, 0x7, 0x1800}, {0x1, 0x48, 0x1800}, {0x2, 0x3}], 0x4) r1 = semget(0xffffffffffffffff, 0x8, 0x0) r2 = semget(0x2, 0x4, 0x1) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f00000002c0)=""/245) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/17) r3 = semget$private(0x0, 0x4, 0x176) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000340)=""/140) semop(r3, &(0x7f0000000140)=[{0x2, 0xfff, 0x1800}], 0x1) shmctl$IPC_RMID(0x0, 0x0) 02:49:09 executing program 2: r0 = getgid() chown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, r0) 02:49:09 executing program 4: r0 = msgget(0x3, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/187) 02:49:09 executing program 3: r0 = socket$inet6(0x18, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, 0x0) 02:49:10 executing program 3: r0 = msgget(0x3, 0x0) msgsnd(r0, 0x0, 0xffffffffffffffea, 0x0) [ 619.261643][T19943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) 02:49:10 executing program 4: r0 = socket$inet6(0x18, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x8, 0x0, 0x0) 02:49:10 executing program 3: r0 = geteuid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chown(&(0x7f0000000080)='./file0\x00', r0, 0x0) 02:49:10 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@in={0x2, 0x2}, 0xc) 02:49:10 executing program 2: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000040)=0x1f, 0x4) listen(r0, 0x0) 02:49:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x9803000000000000) 02:49:10 executing program 4: r0 = socket$inet6(0x18, 0x2, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/186, 0xba, 0x0, 0x0, 0x0) [ 619.533267][ T26] audit: type=1400 audit(1644461350.249:1017): avc: denied { setopt } for pid=19961 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 619.620118][ T26] audit: type=1400 audit(1644461350.279:1018): avc: denied { listen } for pid=19961 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 619.643740][T19966] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:10 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r0, &(0x7f0000000ac0)={&(0x7f00000000c0)=@in, 0xc, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1}, {0x0}, {0x0}], 0x9, &(0x7f0000000780)=[{0x10}], 0x10}, 0x0) 02:49:10 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, @val, {@ipv6}}, 0x0) 02:49:10 executing program 2: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000040)=0x1f, 0x4) listen(r0, 0x0) 02:49:10 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 02:49:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x9d16000000000000) 02:49:10 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x100, 0x0, 0x0) 02:49:10 executing program 4: r0 = msgget(0x3, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/244) msgsnd(r0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 02:49:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040)={0x0, 0x100000000}, 0x10) [ 620.152163][ T26] audit: type=1400 audit(1644461350.869:1019): avc: denied { setattr } for pid=19971 comm="syz-executor.4" name="zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 02:49:10 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r0, &(0x7f0000000ac0)={&(0x7f00000000c0)=@in, 0xc, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000780)=[{0x10}], 0x10}, 0x1) 02:49:10 executing program 2: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000040)=0x1f, 0x4) listen(r0, 0x0) [ 620.195519][T19972] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:11 executing program 1: symlinkat(&(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file3\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x0) 02:49:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) write(r0, &(0x7f0000001480)="8b", 0x1) 02:49:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) 02:49:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', 0x1e9) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x1}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) poll(&(0x7f0000000180)=[{r1, 0x4}], 0x1, 0x0) 02:49:11 executing program 2: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000040)=0x1f, 0x4) listen(r0, 0x0) 02:49:11 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 02:49:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x9e00000000000000) 02:49:11 executing program 1: getpeername$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001440)) 02:49:11 executing program 0: r0 = syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, r0, 0x0) 02:49:11 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) dup(0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x2) 02:49:11 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000002005532bfa300000000000007030000fdfdfff67a0af0ffd8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00fe00000000850000000a000000b70000000000000095000020000000009c050000002c9fbc429adad5ff4c6fa026093e530cf08ee200000000000000076b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c45aa7ffb347a36f5662403e1b2be4cc7c2683918a0d411a9872971c5c56c7060d1e86ac65b0a2cb9cde0100000000000000f32f257e6873eb953ab12bda45c65549f69ca3c00cb9bf4e418d07fa22f0610a0300bdf400d3ab967e0dd8e263f63223b7b80197aa743fe055193161f45346b100000000000000000089e399f6609876b5887437a172ebc02a748675298b79dc194e533583412dff048fc21f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x894) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001840)={0x4, 0x0, 0x50000000, 0x3}, 0x10, 0x2efe2, r1, 0x0, &(0x7f0000001a00)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}, 0x80) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) unshare(0x8000600) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) unshare(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@getqdisc={0x30, 0x26, 0x30a, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0x4}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 620.539043][T20003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:11 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) fcntl$setlease(r0, 0x400, 0x2) 02:49:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4bfa, 0x0) [ 620.624105][ T26] audit: type=1800 audit(1644461351.339:1020): pid=20013 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1163 res=0 errno=0 02:49:11 executing program 4: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 620.769780][ T26] audit: type=1800 audit(1644461351.449:1021): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1184 res=0 errno=0 02:49:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) [ 620.835604][T11676] usb 4-1: new high-speed USB device number 43 using dummy_hcd 02:49:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x9effffff00000000) 02:49:11 executing program 1: syz_clone(0x8001800, 0x0, 0x0, 0x0, 0x0, 0x0) [ 621.085255][T11676] usb 4-1: Using ep0 maxpacket: 16 [ 621.255087][T11676] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 621.535203][T11676] usb 4-1: string descriptor 0 read error: -22 [ 621.541520][T11676] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 621.555852][T11676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.811656][T11666] usb 4-1: USB disconnect, device number 43 02:49:13 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000200), 0x0) 02:49:13 executing program 1: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) 02:49:13 executing program 0: syz_clone(0x20180, 0x0, 0x0, 0x0, 0x0, 0x0) 02:49:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xa200000000000000) 02:49:13 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001640)={&(0x7f0000000080), 0xc, &(0x7f0000001600)={&(0x7f00000000c0)={0xec4, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "6276876dfa555e24dc1c0510c347822e3c30cf1b1dbdcf3e0e803a2a187ba11a4e85a375ff329334ecda1d1382ca80e117629990d4295f24d231e3f6ead1dded602e689d29ad501e66d65d874e8e5b999e245e015cbf7eb4a92abef3898812bc45ae6244216ac71c01ccedb16d9c4e3cac68310856e3cc19d49d0376ed9a1180afb2bcad7d9d98595654aa293aeb81fb55933412cd970e18547eb184692c947f463f1758b2b41e6763da02d284484829cfa0eb9032592578be084c70b7be1a1f6e172bd75e5fb052a017e23053482c250e7f17f6af"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "b7a317731738cf814d390033a3fe522a9b580de6dd86eedc30db0e634c7689fb146866434fbb5478019fb7682660619721af1a6beccff2452978eb3fc0d70f2b05a0038bd5aef0c0b2b72f061729f8928f4b29c1d29a95edc176b66de6f8212bff5931e549f56b1e7c75c25e3f083a736fcf9dc89c27df5245d7814572ff1e82fd5cf35316313452c4317798a4465297df40dc5b68c0858202b457abf4ae13c4a5a81a5cb995c0c1b320347248f1aaacc4e9a44b59f387012c5aba333293b897efb8259c8b149474980b0c2034f8fbb3a815deeb8be37dba87f7d52cce9d61ef886da329fa28926bd7"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "477f1e8685a81b870c558a8ac818a6647d5e8d7103bd089384fd9730039b075e0368068e33f439f498b1c4a126c7fdbba82be4b100f7952798b1dad1f3bbea27f7fc0e4f4979ce33b26032e1990f0a57ec9dc17a426fe64a575204e5fe026aa3c1d2a4f890dafcdd88b72d61f8238c221864c92b6778c17a5b4b21904cf34c23c57a4026cf6918c35f42e4f0d3c617123edf82a6003e2394daa8a3fb5e627810e1ca808b2f84e64d521093708518de706b12805a2ae00b3685b495e8438512c1968e268a31be522695ea134506a42be894"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "91b1ae7c7921098f1b06264a51c4c1e916f03417bfb64bf3ec853cbbd1239aed289f244e14d7f8bc4ece8cd6aa4f922c30e94fa328cc7d3199bee2909f363865c905aaede4e01dc3cf9e68df88c697f11b611c0baf85824c8bc830fc86d5730c92a74cd02b0500c9d03ff1730e81a1e22559f2d65390fb075bdfb5172dbe60a5a59212118582b1f13baa34c9e788c286dcf966be15bf846e545b64ea1810c8a97e2bc1b76104f675b6be7071af08ee669eaa365985dcc27d47372ee084768bbd91"}, @INET_DIAG_REQ_BYTECODE={0xb41, 0x1, "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"}]}, 0xec4}}, 0x0) [ 622.361464][T20042] selinux_netlink_send: 12 callbacks suppressed [ 622.361482][T20042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20042 comm=syz-executor.5 [ 622.380187][ T26] audit: type=1400 audit(1644461353.099:1022): avc: denied { nlmsg_write } for pid=20041 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 622.400176][T20042] __nla_validate_parse: 1 callbacks suppressed 02:49:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)=@abs, 0x6e, 0x0}}], 0x1, 0x0) [ 622.400195][T20042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0xfffb, 0x4) 02:49:13 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) [ 622.594381][T20054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20054 comm=syz-executor.5 02:49:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r0, 0x0, 0x0, 0x0) 02:49:14 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/111, 0x6f, 0x0) 02:49:14 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:49:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), 0x4) 02:49:14 executing program 1: bpf$MAP_CREATE(0x5, &(0x7f00000033c0), 0x48) 02:49:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xb900000000000000) 02:49:14 executing program 0: io_setup(0x4, &(0x7f0000001300)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 02:49:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001440)=@newchain={0x11, 0x1c, 0x1}, 0x24}}, 0x0) 02:49:14 executing program 3: pipe2$9p(&(0x7f00000001c0), 0x84000) [ 623.916541][T20065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20065 comm=syz-executor.5 02:49:14 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0x13, &(0x7f0000000000)={0xffffffff}, 0x8) [ 623.958170][ T26] audit: type=1400 audit(1644461354.679:1023): avc: denied { accept } for pid=20067 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 623.987000][ T1224] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.993318][ T1224] ieee802154 phy1 wpan1: encryption failed: -22 02:49:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, 0x0) [ 624.019840][T20065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:14 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 02:49:14 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) timerfd_gettime(r0, 0x0) 02:49:14 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000001440)='/proc/stat\x00', 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7}, &(0x7f0000000080)={0x9, 0x80000000, 0xb}, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1]}, 0x8}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) 02:49:14 executing program 4: sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) 02:49:14 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r0, 0x0, 0x0, 0x0) 02:49:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) [ 624.188451][T20080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20080 comm=syz-executor.5 02:49:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xba03000000000000) 02:49:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001440)=@newchain={0x24, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x2}}}, 0x24}}, 0x0) 02:49:15 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0xc0189436, &(0x7f00000000c0)) 02:49:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000140)) 02:49:15 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000001440)='/proc/stat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x9}, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1]}, 0x8}) 02:49:15 executing program 3: r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x4041, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 02:49:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f00000000c0)) 02:49:15 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10}, 0x10}}, 0x0) 02:49:15 executing program 4: add_key$keyring(&(0x7f0000000140), 0xfffffffffffffffd, 0x0, 0x0, 0x0) 02:49:15 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) connect$nfc_llcp(r0, 0x0, 0x0) [ 624.470674][T20102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20102 comm=syz-executor.5 02:49:15 executing program 3: renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') 02:49:15 executing program 2: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[], [{@fsuuid}]}}) [ 624.547520][T20102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 624.636046][T20116] fuse: Bad value for 'fd' 02:49:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xc100000000000000) 02:49:15 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)={0x0, 0x0, 0x18}, 0x10) 02:49:15 executing program 1: bpf$BPF_MAP_GET_NEXT_ID(0x13, 0x0, 0x0) 02:49:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 02:49:15 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000002280)=[{&(0x7f0000002100)=""/191, 0xbf}, {0x0}], 0x2, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/50, 0x32}, {&(0x7f0000002300)=""/6, 0x6}], 0x2, 0x0) 02:49:15 executing program 2: pipe(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xffffffffffffb, 0x13, r0, 0x0) [ 624.715819][T20117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20117 comm=syz-executor.5 02:49:15 executing program 1: mount$fuseblk(0x0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x0) [ 624.788913][ T26] audit: type=1400 audit(1644461355.509:1024): avc: denied { map } for pid=20121 comm="syz-executor.2" path="pipe:[87307]" dev="pipefs" ino=87307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 02:49:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4) 02:49:15 executing program 2: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'root'}, 0x22}, {@smackfsfloor={'smackfsfloor', 0x3d, '})**'}}]}}) 02:49:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)) 02:49:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005880)={0x0, 0x2, &(0x7f0000005740)=@raw=[@map_fd], &(0x7f0000005780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 624.867644][T20130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20130 comm=syz-executor.5 [ 624.931954][T20135] fuse: Bad value for 'fd' [ 624.944626][T20130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:15 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) [ 625.116514][T20143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20143 comm=syz-executor.5 02:49:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xc203000000000000) 02:49:15 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 02:49:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x100, 0x218, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0xff000000], [], 'syzkaller0\x00', 'wg1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'batadv_slave_0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 02:49:15 executing program 4: syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffe01, 0x0) 02:49:15 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) 02:49:15 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x8201) [ 625.219642][ T26] audit: type=1400 audit(1644461355.939:1025): avc: denied { setopt } for pid=20146 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 625.228123][T20151] x_tables: duplicate underflow at hook 2 02:49:16 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f00000054c0)) 02:49:16 executing program 3: socket(0x0, 0x8080f, 0x0) 02:49:16 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) [ 625.277365][T20156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20156 comm=syz-executor.5 02:49:16 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x62041, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) 02:49:16 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f00000054c0)) syz_mount_image$fuse(&(0x7f0000005500), &(0x7f0000005540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005580)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}}) lstat(&(0x7f0000006f80)='./file0\x00', &(0x7f0000006fc0)) [ 625.402098][T20156] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:16 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000040)={0x43}, 0x43) [ 625.609160][T20165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20165 comm=syz-executor.5 [ 625.624670][T20172] fuse: Bad value for 'fd' 02:49:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xdd01000000000000) 02:49:16 executing program 3: rt_sigaction(0x40, &(0x7f0000000100)={&(0x7f0000000040)="0fde43cb400fcf66410f76aeffefffffc403816cce00f04083946e7c2a3befd5430f38c8283e3667660f3a609e5a24ffff00c441a1d82a430fc5f800c46241bebe00000000", 0x0, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000200)) 02:49:16 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) 02:49:16 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001c40), 0x0, 0x0) getdents(r0, 0x0, 0x0) 02:49:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) 02:49:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) 02:49:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x638, 0xffffffff, 0x0, 0x440, 0x440, 0xffffffff, 0xffffffff, 0x568, 0x568, 0x568, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @private0, [], [0xffffff00, 0xff, 0xffffff00], 'xfrm0\x00', '\x00', {0xff}, {0xff}, 0x0, 0xd4, 0x1, 0x40}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @remote, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @local]}}, @common=@inet=@recent0={{0xf8}, {0x8, 0x101, 0x8, 0x0, 'syz1\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, ',-'}}, @common=@inet=@dscp={{0x28}, {0xfc}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000], [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], 'bridge0\x00', 'veth0_to_team\x00', {}, {}, 0x5e, 0xff, 0x1, 0x4}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"928c", 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e21], [0x4e20, 0x4e21], 0xfe, 0x40, 0x8, 0x4}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8000, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) 02:49:16 executing program 0: quotactl(0x0, 0x0, 0xee01, 0x0) 02:49:16 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 02:49:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040), 0x4) [ 625.898452][T20185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 02:49:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000004f80)="4787c7f2bd07bf870e455f7cb5f41567", 0x10) [ 625.948773][T20190] x_tables: duplicate underflow at hook 2 02:49:16 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x7, 0x4) 02:49:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe200000000000000) 02:49:16 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xfff02000000, 0x800}, 0x20) [ 626.170714][T20201] ------------[ cut here ]------------ [ 626.211343][T20203] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 626.214977][T20201] WARNING: CPU: 1 PID: 20201 at mm/util.c:590 kvmalloc_node+0xf5/0x100 [ 626.296106][T20201] Modules linked in: [ 626.300511][T20201] CPU: 1 PID: 20201 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef #0 [ 626.319795][T20201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.336737][T20201] RIP: 0010:kvmalloc_node+0xf5/0x100 [ 626.342208][T20201] Code: 01 00 00 00 48 89 ef e8 c9 0d 0d 00 49 89 c5 e9 62 ff ff ff e8 ec d3 d0 ff 45 89 e5 41 81 cd 00 20 01 00 eb 8e e8 db d3 d0 ff <0f> 0b e9 45 ff ff ff 0f 1f 40 00 55 48 89 fd 53 e8 c6 d3 d0 ff 48 [ 626.385810][T20201] RSP: 0018:ffffc9001072fc48 EFLAGS: 00010212 [ 626.391929][T20201] RAX: 00000000000010db RBX: 0000000000000001 RCX: ffffc900031e9000 [ 626.411523][T20201] RDX: 0000000000040000 RSI: ffffffff81a6da65 RDI: 0000000000000003 [ 626.420017][T20201] RBP: 00000007ff810000 R08: 000000007fffffff R09: 0000000000000001 [ 626.431981][T20201] R10: ffffffff81a6da21 R11: 0000000000000000 R12: 0000000000002dc0 [ 626.440470][T20201] R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000700 [ 626.448947][T20201] FS: 00007f0413614700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 626.458041][T20201] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.464647][T20201] CR2: 00007f8332e5a218 CR3: 0000000026000000 CR4: 00000000003506e0 [ 626.473182][T20201] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 626.491377][T20201] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 626.500828][T20201] Call Trace: [ 626.504132][T20201] [ 626.513654][T20201] xdp_umem_create+0x563/0x1180 [ 626.520045][T20201] xsk_setsockopt+0x73e/0x9e0 [ 626.524749][T20201] ? xsk_tx_release+0x3b0/0x3b0 [ 626.537678][T20201] ? __fget_files+0x28c/0x470 [ 626.542393][T20201] ? selinux_socket_setsockopt+0x6a/0x80 [ 626.553387][T20201] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 626.564038][T20201] __sys_setsockopt+0x2db/0x610 [ 626.572982][T20201] ? xsk_tx_release+0x3b0/0x3b0 [ 626.581946][T20201] ? __ia32_sys_recv+0x100/0x100 02:49:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "d551bc84ece4593a", "bd6d6772360c8edf18f37435ce63e45e", "1d25fa9a", "29d30bc0e04053a8"}, 0x28) 02:49:17 executing program 2: open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000006c0)='./file0\x00', 0x224001, 0x0) 02:49:17 executing program 4: pipe(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f00000000c0)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) 02:49:17 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) 02:49:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe303000000000000) [ 626.594381][T20201] ? lock_downgrade+0x6e0/0x6e0 [ 626.603458][T20201] ? lock_downgrade+0x6e0/0x6e0 [ 626.612260][T20201] __x64_sys_setsockopt+0xba/0x150 02:49:17 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) [ 626.651330][T20212] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 626.663300][ T26] audit: type=1400 audit(1644461357.379:1026): avc: denied { relabelfrom } for pid=20206 comm="syz-executor.4" name="" dev="pipefs" ino=86591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 626.671662][T20201] ? syscall_enter_from_user_mode+0x21/0x70 02:49:17 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) [ 626.731044][T20209] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 626.753927][T20201] do_syscall_64+0x35/0xb0 [ 626.782266][ T26] audit: type=1400 audit(1644461357.499:1027): avc: denied { relabelto } for pid=20206 comm="syz-executor.4" name="" dev="pipefs" ino=86591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 626.791504][T20201] entry_SYSCALL_64_after_hwframe+0x44/0xae 02:49:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001440)=@newchain={0x24, 0x5a, 0x1}, 0x24}}, 0x0) 02:49:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x6, &(0x7f0000000380)=@framed={{}, [@ldst, @btf_id]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x69, &(0x7f0000000400)=""/105, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540), 0x8, 0x10, 0x0}, 0x80) 02:49:17 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000340), 0x4) 02:49:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0xe902000000000000) [ 626.903711][T20223] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 626.932181][T20201] RIP: 0033:0x7f0414c9f059 [ 626.958913][T20201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 627.027763][T20229] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 627.052018][ T26] audit: type=1400 audit(1644461357.739:1028): avc: denied { setopt } for pid=20227 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 627.066116][T20201] RSP: 002b:00007f0413614168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 627.145588][T20201] RAX: ffffffffffffffda RBX: 00007f0414db1f60 RCX: 00007f0414c9f059 [ 627.175172][T20201] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 627.184301][T20201] RBP: 00007f0414cf908d R08: 0000000000000020 R09: 0000000000000000 [ 627.207335][T20201] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 627.222050][T20201] R13: 00007ffd9ff51e7f R14: 00007f0413614300 R15: 0000000000022000 [ 627.259937][T20201] [ 627.263132][T20201] Kernel panic - not syncing: panic_on_warn set ... [ 627.269719][T20201] CPU: 0 PID: 20201 Comm: syz-executor.3 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef #0 [ 627.280224][T20201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.290282][T20201] Call Trace: [ 627.293560][T20201] [ 627.296487][T20201] dump_stack_lvl+0xcd/0x134 [ 627.301090][T20201] panic+0x2b0/0x6dd [ 627.305020][T20201] ? __warn_printk+0xf3/0xf3 [ 627.309617][T20201] ? __warn.cold+0x1d1/0x2cf [ 627.314211][T20201] ? kvmalloc_node+0xf5/0x100 [ 627.318892][T20201] __warn.cold+0x1ec/0x2cf [ 627.323314][T20201] ? kvmalloc_node+0xf5/0x100 [ 627.327995][T20201] report_bug+0x1bd/0x210 [ 627.332342][T20201] handle_bug+0x3c/0x60 [ 627.336500][T20201] exc_invalid_op+0x14/0x40 [ 627.341006][T20201] asm_exc_invalid_op+0x12/0x20 [ 627.345857][T20201] RIP: 0010:kvmalloc_node+0xf5/0x100 [ 627.351146][T20201] Code: 01 00 00 00 48 89 ef e8 c9 0d 0d 00 49 89 c5 e9 62 ff ff ff e8 ec d3 d0 ff 45 89 e5 41 81 cd 00 20 01 00 eb 8e e8 db d3 d0 ff <0f> 0b e9 45 ff ff ff 0f 1f 40 00 55 48 89 fd 53 e8 c6 d3 d0 ff 48 [ 627.370756][T20201] RSP: 0018:ffffc9001072fc48 EFLAGS: 00010212 [ 627.376830][T20201] RAX: 00000000000010db RBX: 0000000000000001 RCX: ffffc900031e9000 [ 627.384805][T20201] RDX: 0000000000040000 RSI: ffffffff81a6da65 RDI: 0000000000000003 [ 627.392773][T20201] RBP: 00000007ff810000 R08: 000000007fffffff R09: 0000000000000001 [ 627.400740][T20201] R10: ffffffff81a6da21 R11: 0000000000000000 R12: 0000000000002dc0 [ 627.408711][T20201] R13: 0000000000000000 R14: 00000000ffffffff R15: 0000000000000700 [ 627.416680][T20201] ? kvmalloc_node+0xb1/0x100 [ 627.421366][T20201] ? kvmalloc_node+0xf5/0x100 [ 627.426046][T20201] ? kvmalloc_node+0xf5/0x100 [ 627.430724][T20201] xdp_umem_create+0x563/0x1180 [ 627.435577][T20201] xsk_setsockopt+0x73e/0x9e0 [ 627.440259][T20201] ? xsk_tx_release+0x3b0/0x3b0 [ 627.445111][T20201] ? __fget_files+0x28c/0x470 [ 627.449791][T20201] ? selinux_socket_setsockopt+0x6a/0x80 [ 627.455432][T20201] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 627.461684][T20201] __sys_setsockopt+0x2db/0x610 [ 627.466544][T20201] ? xsk_tx_release+0x3b0/0x3b0 [ 627.471396][T20201] ? __ia32_sys_recv+0x100/0x100 [ 627.476337][T20201] ? lock_downgrade+0x6e0/0x6e0 [ 627.481195][T20201] ? lock_downgrade+0x6e0/0x6e0 [ 627.486050][T20201] __x64_sys_setsockopt+0xba/0x150 [ 627.491171][T20201] ? syscall_enter_from_user_mode+0x21/0x70 [ 627.497071][T20201] do_syscall_64+0x35/0xb0 [ 627.501488][T20201] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 627.507385][T20201] RIP: 0033:0x7f0414c9f059 [ 627.511800][T20201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 627.531407][T20201] RSP: 002b:00007f0413614168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 627.539825][T20201] RAX: ffffffffffffffda RBX: 00007f0414db1f60 RCX: 00007f0414c9f059 [ 627.547794][T20201] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 627.555764][T20201] RBP: 00007f0414cf908d R08: 0000000000000020 R09: 0000000000000000 [ 627.563731][T20201] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 627.571698][T20201] R13: 00007ffd9ff51e7f R14: 00007f0413614300 R15: 0000000000022000 [ 627.579669][T20201] [ 627.583075][T20201] Kernel Offset: disabled [ 627.587636][T20201] Rebooting in 86400 seconds..