last executing test programs: 3.860759048s ago: executing program 2 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x28, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x28}}, 0x0) 3.860652038s ago: executing program 2 (id=24): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x38}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.600634657s ago: executing program 3 (id=37): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 3.430998862s ago: executing program 3 (id=39): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) 2.574502032s ago: executing program 0 (id=45): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x5f, 0x0, 0x0]}}, 0x0, 0x1d, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000003e58000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000b7000000000000009500"/96], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x2, 0x54, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xae, 0xe2, 0x3a, 0x8, 0x18ec, 0x3290, 0xa66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x54, 0x4, 0x90, 0x2, "", [{{0x9, 0x4, 0x74, 0x2, 0x0, 0xe, 0x1, 0x0, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0xb, 0x30}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x6, 0x3, [0x7, 0x6, 0x7], 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x6, 0x3, 0x9}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x0, 0x8}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x3, "45ed65b7"}]}]}}]}}]}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvfrom(r1, 0x0, 0x0, 0x40000041, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x1, 0x2, '\x00', 0xff, 0x7b}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x3, 0x9, 0x4, 0xb, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0xb, 0x8000}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xff) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a0001ff80000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001c"], 0x2c}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 2.509117574s ago: executing program 3 (id=46): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000003e8512edd5e"], 0x50) 2.508781014s ago: executing program 3 (id=47): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3, 0x9, 0x4, 0x1000}, 0x5, 0x2}, [{0xffffffff, 0x28000000, 0xfff, 0xc, 0x33f, 0x800}, {0x10, 0x9, 0xfffffffe, 0x7f, 0xa638}, {0xff, 0x7, 0x3, 0xd6db, 0x8, 0xb}, {0x8, 0x8, 0x1, 0x40, 0xfffffff0, 0x9}, {0x4bd4d39a, 0x10000, 0x8, 0x6, 0x7ff, 0xe0}, {0x2, 0x0, 0x444, 0xb, 0x3, 0x5}, {0x4, 0x0, 0x5, 0x9, 0x6, 0x7}, {0x4, 0x1, 0x4, 0x4, 0x80000000, 0x1}, {0x0, 0x851, 0x6, 0x2, 0x1, 0xffffffff}, {0x8, 0x9, 0x4, 0x0, 0x3ff, 0xd}, {0x6e, 0x6, 0x0, 0x0, 0xfffffffa, 0x7}, {0x8, 0xc, 0x7f, 0xff, 0x1000, 0x8}, {0x7f, 0x1, 0x4, 0x0, 0x81, 0x6}, {0x3, 0x5, 0x3, 0x100, 0x2, 0x51633f5e}, {0x8, 0x6, 0xff, 0x1000, 0x5, 0x2}, {0x99, 0x6, 0x6, 0x0, 0x7, 0xb5a}, {0x2, 0x9, 0x3, 0x8, 0xffffffff, 0x4}, {0x5, 0x7, 0x7f, 0x5526, 0x4, 0x9}, {0x4, 0x6, 0xfff, 0x1, 0x2, 0x7}, {0x1, 0x7, 0x14d1, 0x8, 0xcfb, 0x4}, {0xf, 0x9, 0x6, 0x1ff, 0x3, 0x401}, {0x58, 0x8, 0x8, 0x200, 0x8}, {0xb3e, 0x81, 0x7, 0xcaf7, 0x80, 0x8}, {0x7fffffff, 0xf3, 0xfff, 0x9, 0x1, 0x6}, {0x8, 0x0, 0x4, 0x8, 0x4, 0xf8000000}, {0xfffffffe, 0x7, 0x0, 0x9, 0x7, 0x8}, {0xf8e0, 0x2, 0x1a, 0x7, 0x5, 0x3}, {0x7, 0x3, 0x52f, 0x7fffffff, 0x4, 0x2}, {0xf16, 0xfffff800, 0xfffffffa, 0x401, 0xe, 0xc22}, {0xfff, 0x6, 0x9, 0x3, 0x8, 0x9}, {0x400, 0x6, 0x9, 0x0, 0xf, 0x7fffffff}, {0x9, 0x0, 0x7, 0x284, 0x5, 0x110}, {0x5, 0x10, 0x3, 0xe5, 0xfff, 0x5}, {0x7, 0x7fffffff, 0xbf, 0x6ee, 0x7, 0xa52a}, {0xe6a0, 0x8, 0x3, 0xc8d7964d, 0x80000000, 0x1}, {0x1, 0x3, 0x4, 0x372, 0x0, 0xfffffffc}, {0x9, 0x3, 0x0, 0x5709, 0x7, 0x2}, {0xf1f, 0x101, 0xe65a8700, 0x4, 0x6, 0x7}, {0x3, 0x26a5, 0x400, 0x8, 0xfff, 0x7}, {0x1, 0x51, 0x0, 0x1, 0x8, 0x101}, {0xfffff801, 0x9, 0x2, 0x2, 0x10001, 0xfffffc01}, {0x9c4, 0x6, 0x57c, 0x6fbe3bcb, 0x4, 0x2}, {0xfffffffa, 0xd, 0x44, 0x795, 0x7000000, 0xab95}, {0xe932, 0x4000, 0x49d25d19, 0x8, 0xb1, 0x9}, {0x0, 0x101, 0x101, 0x1, 0xffffffff}, {0x2, 0x7, 0x0, 0x9, 0x720b, 0x4}, {0x9, 0x7, 0xfffff92a, 0x7, 0x3, 0x5}, {0x7, 0x1000, 0x7, 0x1, 0x1, 0xd5}, {0xfffffffe, 0x80000001, 0xfffffffa, 0x0, 0x6f9d, 0xfd4}, {0xfff, 0x7, 0x0, 0xa2, 0x1ff, 0x80000}, {0x5, 0xf, 0x69f, 0x8, 0x8, 0x1ff}, {0x6, 0xea7f, 0xc, 0x9, 0xab, 0x5}, {0x7c74, 0x3ff, 0x9c65, 0x8, 0x1, 0x2}, {0x9, 0x1, 0x7, 0x8ba, 0x3, 0x80000000}, {0x4, 0x0, 0x0, 0x4, 0x3, 0x3e}, {0xba, 0x7, 0xe8, 0x6, 0x8, 0xf07bcf2}, {0x2, 0x6149, 0x1, 0x5, 0x2, 0x4}, {0xba6d, 0x12, 0x8, 0x2, 0x2, 0x2}, {0xe, 0x4, 0x40, 0x2, 0x0, 0x3}, {0xffff3450, 0xfffffffe, 0x101, 0x400, 0x7, 0x3ff}, {0x631, 0x9, 0xdc0, 0x7, 0x8000, 0xfffffffe}, {0x4, 0x1, 0x6e, 0x7, 0x0, 0x1}, {0x7, 0x8, 0x9, 0x2, 0x6, 0x4}, {0x5, 0x0, 0x856, 0x1, 0x9, 0x5}, {0x8, 0x1, 0x80, 0x0, 0xfffffffb, 0x81}, {0x7, 0x97fd, 0x4, 0xc, 0x0, 0x9}, {0x2b, 0x158, 0x1, 0x2, 0x8, 0x3}, {0x5, 0xfffffffb, 0x7, 0x0, 0x8, 0x6}, {0xe7, 0x686, 0xffffffff, 0x2d, 0x2}, {0xb, 0x80, 0x6, 0x6, 0x3, 0x2}, {0x200, 0x3, 0x0, 0x8, 0x0, 0x9}, {0xffff, 0x3, 0x3, 0xf341, 0xd5, 0x4}, {0x6aa2, 0x800, 0x8, 0x7, 0x1, 0xfffffffc}, {0x9, 0x8, 0x10, 0x1abe, 0xe4, 0x9}, {0xa, 0x96e, 0x6, 0x2c38e618, 0x9e, 0x77}, {0xf4ad, 0x8, 0x7, 0xc64, 0x4800, 0x4}, {0xfffffff8, 0xfffffffc, 0x7, 0x14, 0x8}, {0xa3cc, 0xffff, 0x6, 0x8, 0x0, 0x7}, {0x42, 0x8, 0x7, 0x2, 0xaec, 0xc}, {0x89, 0x0, 0x33, 0xfffffff7, 0xa7f, 0x800}, {0x6, 0x4, 0x80000000, 0x0, 0x7, 0x2}, {0x917, 0x57ed, 0xde, 0x9, 0x9, 0x4}, {0xd11, 0x6, 0x5, 0x4, 0xff, 0x3}, {0x81, 0x7, 0x2, 0x5, 0x7b, 0x2}, {0x10001, 0x7, 0x4, 0x9, 0x8}, {0x39b27237, 0x8, 0x10000, 0xfffffffc, 0x3, 0x1}, {0x8, 0x9, 0x200000, 0x810000, 0x9, 0x9}, {0x9b, 0x0, 0x2f5, 0x6, 0x9, 0x6}, {0x2, 0x8, 0xb0, 0x2, 0x1, 0x8000}, {0x1, 0x0, 0xffffffbd, 0x2, 0xdea, 0xc85a}, {0x6, 0xd7b4, 0x9, 0x4, 0x7, 0x1}, {0x0, 0x3, 0xf, 0xd, 0x5, 0x8}, {0x1, 0x0, 0xe62d, 0x81, 0x40, 0x2}, {0x7, 0x7, 0x5, 0x4, 0x5, 0x7fff}, {0x3, 0x80000001, 0x0, 0x5, 0x200, 0x401}, {0xe, 0x8001, 0x9, 0x7fffffff, 0xf000, 0x10001}, {0x8, 0x40, 0x7fff, 0x8, 0xfffffffe, 0x3fa8}, {0x1, 0xb53, 0xb, 0xed97, 0x101, 0x6}, {0x85c9, 0x10001, 0x3, 0x2, 0x4, 0x4}, {0x12d3000, 0x8, 0x4, 0x5, 0x3, 0x5}, {0x6, 0x5, 0x2, 0x4, 0x5, 0x200}, {0xffffff84, 0x8a, 0x4, 0x9, 0x3, 0x3}, {0x0, 0x5, 0x1, 0x5, 0x8, 0x8}, {0x1ff, 0x1, 0xe7, 0x4, 0x8bd, 0x7ff}, {0x5, 0x396, 0x7, 0x8, 0x80000001, 0x8}, {0x1, 0x0, 0x4, 0x3, 0x7fffffff, 0x5}, {0x0, 0x3, 0x2d0, 0xffffff81, 0x1, 0x4}, {0x1ff, 0x6, 0x6, 0x9e9, 0x0, 0x9}, {0xb, 0xfffffff7, 0x3, 0x1, 0x3, 0x6}, {0xfffffff1, 0x175, 0x6, 0x8001, 0x8, 0x9}, {0xfffff001, 0x7fff, 0x7, 0x8, 0x2, 0x2}, {0x2, 0x4, 0xd, 0x5, 0x8, 0x3e3}, {0xffffffff, 0x6, 0x7f, 0x4, 0x9, 0x6}, {0x100400, 0x7f, 0x100, 0x4, 0x3, 0x80}, {0x8001, 0x3, 0x9, 0x9a, 0xfffffff7, 0x10}, {0xf, 0x6, 0x5, 0x0, 0x1000, 0x8}, {0x8000, 0x8, 0x5b5, 0x1, 0x4, 0x563fadb0}, {0x70, 0x4, 0x7, 0x0, 0x7, 0x2}, {0x7f, 0xb, 0x7, 0x6, 0x100, 0x10001}, {0x200, 0x7fffffff, 0x6, 0x3c, 0xfffffe01, 0x80}, {0x1, 0x7, 0x2, 0x5, 0x800, 0x1}, {0xf, 0xe, 0xff, 0x1, 0xd9}, {0xffffffff, 0x4, 0x26, 0x8, 0x8000, 0x7fffffff}, {0x3f, 0x1ff, 0x2, 0xfffffff9, 0x2, 0x3}, {0x9, 0xffffffff, 0x13, 0x1, 0x3ff, 0xfffffff7}, {0x0, 0x0, 0x3, 0x8, 0x7fff, 0x80000000}, {0x800, 0x78, 0x2, 0x0, 0xfff, 0x1}, {0x7fff, 0xb, 0x7, 0x8, 0x6, 0x200}], [{0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x6}, {0x4}, {0x3}, {0x2}, {0x3, 0x1}, {0x1242ba4bc98014d3, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x2ede38bbac46bbb6, 0xaa0b643d3413b21c}, {0x3, 0x1}, {0x3}, {0x7d07571d1abda836, 0x1}, {0x3}, {0x5}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x2}, {0x1}, {}, {0x1d4eb1980b81696f}, {}, {0x3}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0xcdd8c56e51c41803}, {}, {0x3, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {}, {0x5}, {0x2}, {0x0, 0x1}, {0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x3}, {0x7, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.488486975s ago: executing program 3 (id=48): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a80000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4254030028000100280012800b00010065727370616e"], 0xa8}, 0x1, 0x0, 0x0, 0x200008c1}, 0x810) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.437269937s ago: executing program 3 (id=49): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x5, 0x8, 0x2, 0x0, 0x19, "100056f200"}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="400981"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000340)=""/217, 0xd9}], 0x1) 1.009069466s ago: executing program 1 (id=54): setuid(0xee00) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.008931756s ago: executing program 1 (id=55): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) 1.008850606s ago: executing program 1 (id=56): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 937.471088ms ago: executing program 0 (id=57): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 913.493089ms ago: executing program 0 (id=58): unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 830.792712ms ago: executing program 2 (id=61): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) iopl(0x3) 825.953772ms ago: executing program 0 (id=62): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x129a02, 0x0) sendfile(r1, r0, 0x0, 0x8) 777.065774ms ago: executing program 2 (id=63): syz_usb_connect(0x5, 0x24, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 776.956054ms ago: executing program 0 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}, 0x1, 0x800000400000000}, 0x0) 757.346835ms ago: executing program 0 (id=66): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 422.980906ms ago: executing program 4 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2d24d, 0x11f04}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x8014}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 370.179398ms ago: executing program 4 (id=74): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @ip4=@empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) 273.152891ms ago: executing program 4 (id=75): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x137db) 258.493891ms ago: executing program 4 (id=76): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002440)=@delchain={0x4c0, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x488, 0x2, [@TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_POLICE={0x480, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6ee, 0x10000000, 0x6, 0x4, 0x7f, {0x6, 0x1, 0x7fff, 0x8, 0x2, 0x4}, {0x7, 0x1, 0xc59, 0x8, 0x0, 0x2}, 0x401, 0x5, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x6, 0x3, 0x0, 0x2, {0x7f, 0x2, 0x40, 0xb3b, 0x40, 0x6}, {0x17, 0x1, 0x5, 0x5, 0x400, 0xa89}, 0x7, 0x0, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x101, 0xbf58, 0x200, 0x10000, 0x100, 0x4, 0x800, 0xc5, 0x3, 0x2, 0x200, 0xffffffff, 0xe, 0x0, 0x24, 0x400, 0x0, 0x7, 0x80, 0x90000, 0x6, 0x73, 0x3, 0xd11d, 0x1, 0xe, 0x20004, 0x8000, 0x7d, 0x5, 0x10, 0x7, 0x1, 0x0, 0x3, 0x5, 0x5, 0x64a, 0x80, 0x39, 0xc70, 0x2, 0xfa5, 0x2, 0x8, 0x7ff, 0x72, 0x7fff, 0x3, 0x7354, 0x7ff, 0x3, 0x9, 0x1, 0xffffff01, 0xc, 0x0, 0x0, 0x9, 0x3, 0x8, 0x7, 0xe, 0x80000001, 0x80, 0x100, 0x2, 0x5, 0xb, 0x4, 0x7, 0xdeed, 0x4, 0xff, 0x0, 0x2, 0x5, 0xfff, 0x5c, 0x9, 0x8, 0x8000, 0x6, 0x1ff, 0x8b5c, 0x65a, 0xa2f, 0x8, 0x0, 0x75, 0xe80c, 0x14a, 0x5, 0x7e3, 0x200, 0x3ff, 0x1, 0x0, 0x3d39, 0x7, 0x2, 0x80000001, 0x3, 0x40, 0xdb, 0x80000001, 0x80000001, 0x4, 0xf844, 0x6, 0x6, 0x18a, 0x4, 0x4, 0x8, 0x2, 0xf, 0x0, 0x1, 0x5, 0x8, 0x6, 0x4, 0x8, 0x2, 0x4, 0x9, 0x9, 0x1fe, 0x19c, 0x1, 0x5, 0x20000000, 0x5, 0x0, 0x200, 0x8, 0x4, 0x8000, 0x7, 0xfffffff9, 0x2, 0x10001, 0x4, 0x0, 0xcc7, 0x3, 0xf1, 0x8, 0x7, 0xc82, 0x4, 0x2, 0xfffffff7, 0x7, 0x5, 0x0, 0x0, 0x3, 0x71, 0x6, 0x5d, 0xd7, 0x10000, 0x5, 0x1, 0x671e894c, 0x200, 0x8, 0x4, 0x7, 0x2, 0x3, 0x6, 0x4, 0xd, 0xffffffff, 0x9, 0x80, 0xe, 0x1ff, 0x101, 0x0, 0xffffffff, 0x0, 0x3ff, 0xd6, 0x7f, 0x800, 0x2, 0x6530c187, 0x9, 0x35bfbad2, 0x1, 0xffffffff, 0x6, 0xc76, 0x8, 0x8, 0x8, 0x1d, 0x10001, 0x3, 0x2, 0x7, 0x4, 0x7, 0xcd31, 0x5, 0x6, 0xfba, 0x8, 0xd, 0x5, 0x4, 0x1, 0x9, 0x7, 0x7, 0x5, 0x424f90a6, 0xfff, 0x6f, 0xfffffffb, 0x2, 0xc, 0x101, 0xc, 0x12, 0x0, 0x2, 0x2, 0x3, 0x2, 0x0, 0xbe90, 0x56, 0x100000, 0x3, 0x7, 0xf, 0x0, 0x9, 0x4, 0x9, 0x1, 0x800, 0xffffffff, 0xfffffff5, 0x401, 0x8, 0x7, 0xf, 0x8, 0x9]}]}]}}]}, 0x4c0}}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 223.437213ms ago: executing program 2 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 116.980336ms ago: executing program 4 (id=78): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1de", 0x54}, {&(0x7f00000008c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8ae", 0x30}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001e00)="538eb34b12b6e78221d826a03b7c0143cd6b6f16b06f4d0fa7269431b78022336d8825fa7a0e3511e83e19a4a17ae750af98ccb9c80337704a140c13b9307b1191af533c2574ef20e724fa7797f387507cb9f93eeebc24a3403aa64f0cd9da80b8e2432ce5be3a878cba0519d691a55d2c50dfb017ef6a444b9c73aab5428ced4fa4a914b178a1d00dfb91aab5b9eddbffdd480964c76916098e4790dabed0d7324638701c4405dec8192232ce17b730425180aff1e87b5648012f5121b23bbdea0fcd703090816285febe7c4b307a536948b6e3853662c9a2d71fe21c5843d97c86dccdff76d3d3fffe58e94dcb93d706fe1c7e23b360a3f189c6ac6644b1aa8c3bbf4fd56998c52011e256bf2267e73fe6de7b57d1d8dc283b9f9a729590e2543d86f7d1f5eae074ebd97c014a0991631bda524a4380c04b2810d2868b8e2edd814da9a9bc9b78b72ae4e5c00da1bee412b2226ed068616823f9cbd256f0bfa2d9819a13b8b79fdf561941335c8ab88fd398320194f829446aa1bda7da4765714e6ab5346f3f0fbf22f06e5de43e3d2f5124a0b96c8b3aa4d7b7a24bfb41a909f8316adea4c95a49fcee2568b9e30fc6a6762cec1f4f7c96774299f7f4403c31431acb4c36a806e0cfc590046b2b982400ff72205ca3986edd7c8a47aae0b57c421d7fcc99e76f5d63d696e4de21e8b4a0966a94576fa8eda2deecd9b92ced18ea74e1c949416768249ccaf9d508d4309eeee299573127ce8f76d15479d9cdeb719411e2682bbb1729358f71538a01b94593ea105843f9169d56bb992d3bae2a3da150fd62c59b1aea8c15f144bab09693a14f6e638628324b952cee8bb6f54c985ec5d95553893a8ec43547d49abd2b11ef310a60c75fc67487d0c1558ff741b4ce134136a6e0675d0f43378e2af7fd3d0832b86bdf8924cc35a99ed8f6d0ec828d4915a98d735e9f4e4f95d24bbe620236202602480995f04bfafe43399bf10ad35beb26a6dc369c91182b9d516c8d10f431bab67bf3a3547a7bd290597a3dcd14b0eac22db094008731433485df92c54b814735b0f1fea5f4b155b5b5542eed11b2ae993538c10fd4ac0391e96f3e999a65c9459f89689775be7d3493f2e4fe0e1e731ab9b7258c0cc202cecc4216a15519474432cd93370b52e7b52c078795139361e42b43f76e86a3862d0442ad47bcc5045d06b625e097f35aa2ef47ec56e376b90728a73a15a2544f5573f6db2a14b696b2317cc4d92836cad8b7effab108c127f4413c4a9ff1891bcae6f3131c061856c1f7f209782f95cec6bc08794ae7b2ef53e397b409b1f6b74097dbe29fa5fb1a7d0bf597586a21a58592ed97e49d49d8dea1285fae317f5689fbc86e8a3dd4ef", 0x3d5}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 116.795596ms ago: executing program 1 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x268, 0x0, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0x4}, 0x21, 0x9, 0x3, 0x40, 0x8, 'syz0\x00', "f43380672f50b6b8fa663daa88f136d6a00b11c6b368bc0a44fec93dbd73a2b2", "b0cd514453a74ea253b0d28ce53327c3b71c15ac6ea2b74fc3bd670a6cf64673", [{0x16c, 0x3d2, {0x2, 0xd}}, {0x2, 0x8000, {0x0, 0x5}}, {0x80, 0x6, {0x0, 0x3}}, {0x200, 0x87da}, {0x6, 0x6b8, {0x2, 0x9519}}, {0xfff8, 0x61d, {0x1, 0x15}}, {0x6, 0x38, {0x1, 0x5}}, {0x0, 0x7f, {0x1, 0x8}}, {0xb, 0x7, {0x2}}, {0xff, 0x6, {0x0, 0x8}}, {0x2, 0x3ff, {0x2, 0xfffffff7}}, {0x1, 0x7, {0x0, 0x9}}, {0x1, 0x4, {0x2, 0x9}}, {0x40, 0x4, {0x2, 0x1}}, {0xb7, 0x401, {0x3}}, {0xd6f, 0x3, {0x0, 0x4}}, {0x4, 0xf8a, {0x2, 0x200}}, {0x200, 0x7, {0x1, 0x8}}, {0x7fff, 0x9, {0x3}}, {0xe62, 0x1, {0x3, 0x7fffffff}}, {0x4, 0x0, {0x0, 0xc33}}, {0xb, 0x0, {0x0, 0x8}}, {0x0, 0x3, {0x2}}, {0x6, 0x7, {0x0, 0x8}}, {0x7, 0x7, {0x0, 0x1733}}, {0x8, 0xb7, {0x1, 0x7}}, {0x4, 0xc48, {0x3, 0x6}}, {0x6, 0x9, {0x0, 0xeb}}, {0x81, 0x1, {0x1, 0x8}}, {0x5, 0x1, {0x0, 0x4}}, {0x2, 0x800, {0x3, 0x8}}, {0x1, 0x5, {0x0, 0x8}}, {0x4, 0x0, {0x3, 0x1}}, {0x3, 0x9d5, {0x1, 0x5}}, {0x1, 0xfffa, {0x2, 0x4}}, {0x8, 0xd, {0x1}}, {0x40, 0x0, {0x0, 0x7fffffff}}, {0x6d75, 0x80, {0x2, 0x3}}, {0x401, 0xac1, {0x2, 0x7fff}}, {0xf, 0xfffd, {0x3, 0x3ff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x800}, 0x4040050) 76.201428ms ago: executing program 1 (id=80): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 50.419789ms ago: executing program 2 (id=81): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 5.1189ms ago: executing program 4 (id=82): timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_gettime(r0, 0x0) 0s ago: executing program 1 (id=83): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 25.225418][ T24] audit: type=1400 audit(1774766296.189:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.226809][ T267] cgroup: Unknown subsys name 'net' [ 25.248106][ T24] audit: type=1400 audit(1774766296.189:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.275415][ T24] audit: type=1400 audit(1774766296.219:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.275898][ T267] cgroup: Unknown subsys name 'devices' [ 25.496857][ T267] cgroup: Unknown subsys name 'hugetlb' [ 25.502610][ T267] cgroup: Unknown subsys name 'rlimit' [ 25.669566][ T24] audit: type=1400 audit(1774766296.629:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.692748][ T24] audit: type=1400 audit(1774766296.629:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.700482][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.717849][ T24] audit: type=1400 audit(1774766296.629:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.749365][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.749461][ T24] audit: type=1400 audit(1774766296.689:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.783640][ T24] audit: type=1400 audit(1774766296.689:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.809288][ T24] audit: type=1400 audit(1774766296.699:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.835056][ T24] audit: type=1400 audit(1774766296.699:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.472350][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.479820][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.487349][ T277] device bridge_slave_0 entered promiscuous mode [ 26.495191][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.502334][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.509619][ T277] device bridge_slave_1 entered promiscuous mode [ 26.542478][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.549535][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.556957][ T275] device bridge_slave_0 entered promiscuous mode [ 26.563911][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.570969][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.578678][ T275] device bridge_slave_1 entered promiscuous mode [ 26.657927][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.665152][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.672603][ T278] device bridge_slave_0 entered promiscuous mode [ 26.682213][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.689272][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.696699][ T279] device bridge_slave_0 entered promiscuous mode [ 26.707406][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.714584][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.722304][ T279] device bridge_slave_1 entered promiscuous mode [ 26.728835][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.736095][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.743457][ T278] device bridge_slave_1 entered promiscuous mode [ 26.801340][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.808467][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.815802][ T276] device bridge_slave_0 entered promiscuous mode [ 26.825063][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.832185][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.839463][ T276] device bridge_slave_1 entered promiscuous mode [ 26.989866][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.997090][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.004641][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.011888][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.041057][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.048188][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.055509][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.062534][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.078876][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.085940][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.093729][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.100923][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.138392][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.145549][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.152895][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.160000][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.182109][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.189162][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.196491][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.203525][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.216931][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.224274][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.231647][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.238763][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.246208][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.253754][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.260982][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.268097][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.275316][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.282679][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.289819][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.321356][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.329537][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.337450][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.345284][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.353814][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.360865][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.368300][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.376556][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.383594][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.390988][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.399078][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.406109][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.413633][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.421840][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.428853][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.436430][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.444607][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.473293][ T275] device veth0_vlan entered promiscuous mode [ 27.482643][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.492673][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.500567][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.508143][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.516134][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.524514][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.531539][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.538896][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.547249][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.554272][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.561644][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.569737][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.576874][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.584450][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.592647][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.599644][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.607005][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.614955][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.623147][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.647553][ T277] device veth0_vlan entered promiscuous mode [ 27.654414][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.662568][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.670422][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.679907][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.687871][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.695858][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.703907][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.711996][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.719851][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.728285][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.736665][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.745108][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.753628][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.761542][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.769465][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.776956][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.795467][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.804436][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.812930][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.825515][ T276] device veth0_vlan entered promiscuous mode [ 27.833204][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.842004][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.849526][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.857344][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.864837][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.872603][ T275] device veth1_macvtap entered promiscuous mode [ 27.882082][ T278] device veth0_vlan entered promiscuous mode [ 27.894780][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.902521][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.910425][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.918667][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.927099][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.935353][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.942378][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.949697][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.958217][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.966570][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.973609][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.980961][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.988408][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.003373][ T277] device veth1_macvtap entered promiscuous mode [ 28.012300][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.021523][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.029775][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.037612][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.046382][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.055135][ T278] device veth1_macvtap entered promiscuous mode [ 28.068111][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.075824][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.084109][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.097098][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.105277][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.113651][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.123617][ T276] device veth1_macvtap entered promiscuous mode [ 28.134648][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.142942][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.151863][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.160292][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.170137][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.178630][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.187052][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.195432][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.203853][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.212141][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.237412][ T278] request_module fs-gadgetfs succeeded, but still no fs? [ 28.245687][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.254998][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.263519][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.272221][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.281342][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.297217][ T278] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 28.300802][ T279] device veth0_vlan entered promiscuous mode [ 28.324215][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.342594][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.351317][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.367961][ T279] device veth1_macvtap entered promiscuous mode [ 28.395045][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.422544][ T315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 28.448741][ T315] tipc: MTU too low for tipc bearer [ 28.512522][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.533790][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.542561][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.563110][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.572487][ T320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.060701][ T20] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 29.190741][ T297] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.220690][ T326] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 29.730751][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.780980][ T20] usb 2-1: not running at top speed; connect to a high speed hub [ 29.790769][ T297] usb 5-1: Using ep0 maxpacket: 32 [ 29.860804][ T20] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 29.869052][ T20] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 29.879475][ T20] usb 2-1: config 4 has no interface number 0 [ 29.910729][ T297] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.990806][ T326] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 30.000133][ T326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.008538][ T326] usb 3-1: Product: syz [ 30.012964][ T326] usb 3-1: Manufacturer: syz [ 30.017569][ T326] usb 3-1: SerialNumber: syz [ 30.023599][ T326] usb 3-1: config 0 descriptor?? [ 30.050834][ T20] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 30.059990][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.069322][ T20] usb 2-1: Product: syz [ 30.073585][ T20] usb 2-1: Manufacturer: syz [ 30.078193][ T20] usb 2-1: SerialNumber: syz [ 30.110766][ T297] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 30.119975][ T297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.128081][ T297] usb 5-1: Product: syz [ 30.132357][ T297] usb 5-1: Manufacturer: syz [ 30.136954][ T297] usb 5-1: SerialNumber: syz [ 30.142298][ T297] usb 5-1: config 0 descriptor?? [ 30.304082][ T416] netlink: 96 bytes leftover after parsing attributes in process `syz.3.48'. [ 30.312953][ T416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 30.322829][ T416] netlink: 96 bytes leftover after parsing attributes in process `syz.3.48'. [ 30.331734][ T416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.48'. [ 30.340852][ T416] Zero length message leads to an empty skb [ 30.450768][ T20] uvcvideo: Found UVC 0.00 device syz (04f2:b746) [ 30.457326][ T20] uvcvideo: No valid video chain found. [ 30.465195][ T20] usb 2-1: USB disconnect, device number 2 [ 30.480741][ T326] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 30.620663][ T328] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.841427][ T326] usb 1-1: config 84 has an invalid interface number: 116 but max is 0 [ 30.853552][ T326] usb 1-1: config 84 has no interface number 0 [ 30.859744][ T24] kauditd_printk_skb: 71 callbacks suppressed [ 30.859753][ T24] audit: type=1326 audit(1774766301.819:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=422 comm="syz.1.51" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa991bd3819 code=0x0 [ 30.888624][ T326] usb 1-1: config 84 interface 116 has no altsetting 0 [ 31.000761][ T328] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 31.009584][ T328] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.019823][ T328] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 31.028893][ T328] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 31.050801][ T326] usb 1-1: New USB device found, idVendor=18ec, idProduct=3290, bcdDevice= a.66 [ 31.059883][ T326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.067963][ T326] usb 1-1: Product: syz [ 31.072222][ T326] usb 1-1: Manufacturer: syz [ 31.076815][ T326] usb 1-1: SerialNumber: syz [ 31.150830][ T328] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 31.159876][ T328] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 31.167892][ T328] usb 4-1: Product: syz [ 31.172065][ T328] usb 4-1: Manufacturer: syz [ 31.211233][ T328] cdc_wdm 4-1:1.0: skipping garbage [ 31.216465][ T328] cdc_wdm 4-1:1.0: skipping garbage [ 31.222929][ T328] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 31.321665][ T24] audit: type=1400 audit(1774766302.289:146): avc: denied { read } for pid=409 comm="syz.0.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.342980][ T24] audit: type=1400 audit(1774766302.289:147): avc: denied { ioctl } for pid=409 comm="syz.0.45" path="socket:[16450]" dev="sockfs" ino=16450 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.580748][ T326] uvcvideo: Found UVC 0.0b device syz (18ec:3290) [ 31.587232][ T326] uvcvideo: No valid video chain found. [ 31.593696][ T326] usb 1-1: USB disconnect, device number 2 [ 31.693737][ T24] audit: type=1400 audit(1774766302.659:148): avc: denied { ioctl } for pid=427 comm="syz.1.52" path="socket:[16473]" dev="sockfs" ino=16473 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.758307][ T24] audit: type=1400 audit(1774766302.719:149): avc: denied { create } for pid=436 comm="syz.1.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 31.892889][ T326] usb 5-1: USB disconnect, device number 2 [ 31.918480][ T297] usb 3-1: USB disconnect, device number 2 [ 31.924481][ T24] audit: type=1400 audit(1774766302.889:150): avc: denied { create } for pid=445 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.970379][ T448] netlink: 616 bytes leftover after parsing attributes in process `syz.4.60'. [ 31.985643][ T454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 31.995091][ T24] audit: type=1400 audit(1774766302.889:151): avc: denied { setopt } for pid=445 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.023066][ T24] audit: type=1400 audit(1774766302.889:152): avc: denied { write } for pid=445 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.119473][ T24] audit: type=1400 audit(1774766303.079:153): avc: denied { create } for pid=462 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.138878][ T24] audit: type=1400 audit(1774766303.079:154): avc: denied { write } for pid=462 comm="syz.4.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 32.809370][ T495] ================================================================== [ 32.817589][ T495] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 32.826790][ T495] Read of size 1 at addr ffff888113f64bd8 by task syz.2.81/495 [ 32.834322][ T495] [ 32.836653][ T495] CPU: 0 PID: 495 Comm: syz.2.81 Not tainted syzkaller #0 [ 32.843757][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 32.853824][ T495] Call Trace: [ 32.857136][ T495] __dump_stack+0x21/0x24 [ 32.861477][ T495] dump_stack_lvl+0x1a7/0x208 [ 32.866163][ T495] ? show_regs_print_info+0x18/0x18 [ 32.871458][ T495] ? thaw_kernel_threads+0x220/0x220 [ 32.876751][ T495] print_address_description+0x7f/0x2c0 [ 32.882390][ T495] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 32.888898][ T495] kasan_report+0xe2/0x130 [ 32.893322][ T495] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 32.900025][ T495] __asan_report_load1_noabort+0x14/0x20 [ 32.905759][ T495] xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 32.912091][ T495] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 32.918339][ T495] ? xfrm_netlink_rcv+0x72/0x90 [ 32.923193][ T495] ? netlink_unicast+0x876/0xa40 [ 32.928150][ T495] ? ____sys_sendmsg+0x5b7/0x8f0 [ 32.928163][ T495] ? do_syscall_64+0x31/0x40 [ 32.928184][ T495] xfrm_policy_inexact_alloc_chain+0x53d/0xb30 [ 32.928202][ T495] xfrm_policy_inexact_insert+0x70/0x1130 [ 32.949532][ T495] ? __kasan_check_write+0x14/0x20 [ 32.949554][ T495] ? _raw_spin_lock_bh+0x94/0xf0 [ 32.959571][ T495] ? policy_hash_bysel+0x13f/0x6f0 [ 32.964720][ T495] xfrm_policy_insert+0x126/0x9a0 [ 32.969737][ T495] ? xfrm_policy_construct+0x54f/0x1f00 [ 32.975546][ T495] xfrm_add_policy+0x4ed/0x850 [ 32.980318][ T495] ? xfrm_dump_sa_done+0xc0/0xc0 [ 32.985269][ T495] xfrm_user_rcv_msg+0x4d0/0x7b0 [ 32.990210][ T495] ? xfrm_netlink_rcv+0x90/0x90 [ 32.995066][ T495] ? __kasan_check_read+0x11/0x20 [ 33.000167][ T495] ? preempt_schedule_irq+0xca/0x120 [ 33.005440][ T495] ? preempt_schedule_notrace+0x120/0x120 [ 33.011161][ T495] netlink_rcv_skb+0x1f5/0x440 [ 33.015920][ T495] ? xfrm_netlink_rcv+0x90/0x90 [ 33.020856][ T495] ? netlink_ack+0xb70/0xb70 [ 33.025440][ T495] ? mutex_trylock+0xa0/0xa0 [ 33.030014][ T495] ? __netlink_lookup+0x387/0x3b0 [ 33.035028][ T495] xfrm_netlink_rcv+0x72/0x90 [ 33.039693][ T495] netlink_unicast+0x876/0xa40 [ 33.044454][ T495] netlink_sendmsg+0x89c/0xb50 [ 33.049380][ T495] ? irqentry_exit+0x56/0x60 [ 33.053967][ T495] ? netlink_getsockopt+0x530/0x530 [ 33.059157][ T495] ? security_socket_sendmsg+0x82/0xa0 [ 33.064607][ T495] ? netlink_getsockopt+0x530/0x530 [ 33.069967][ T495] ____sys_sendmsg+0x5b7/0x8f0 [ 33.074727][ T495] ? __sys_sendmsg_sock+0x40/0x40 [ 33.079746][ T495] ? import_iovec+0x7c/0xb0 [ 33.084249][ T495] ___sys_sendmsg+0x236/0x2e0 [ 33.089010][ T495] ? slab_post_alloc_hook+0x7d/0x2f0 [ 33.094276][ T495] ? __sys_sendmsg+0x280/0x280 [ 33.099027][ T495] ? alloc_file+0x82/0x540 [ 33.103430][ T495] ? __fdget+0x1a1/0x230 [ 33.108265][ T495] __x64_sys_sendmsg+0x1f9/0x2c0 [ 33.113186][ T495] ? __kasan_check_write+0x14/0x20 [ 33.118273][ T495] ? ___sys_sendmsg+0x2e0/0x2e0 [ 33.123110][ T495] ? __kasan_check_read+0x11/0x20 [ 33.128146][ T495] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 33.133763][ T495] do_syscall_64+0x31/0x40 [ 33.138191][ T495] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.144154][ T495] RIP: 0033:0x7f6ee4944819 [ 33.148571][ T495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.168272][ T495] RSP: 002b:00007f6ee339f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.176931][ T495] RAX: ffffffffffffffda RBX: 00007f6ee4bbdfa0 RCX: 00007f6ee4944819 [ 33.184888][ T495] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 33.192842][ T495] RBP: 00007f6ee49dac91 R08: 0000000000000000 R09: 0000000000000000 [ 33.200809][ T495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.208788][ T495] R13: 00007f6ee4bbe038 R14: 00007f6ee4bbdfa0 R15: 00007ffc30bbad98 [ 33.216747][ T495] [ 33.219067][ T495] Allocated by task 495: [ 33.223290][ T495] __kasan_kmalloc+0xda/0x110 [ 33.228033][ T495] __kmalloc+0x1a4/0x330 [ 33.232249][ T495] sk_prot_alloc+0xb2/0x340 [ 33.236719][ T495] sk_alloc+0x38/0x4e0 [ 33.240846][ T495] pfkey_create+0x12a/0x660 [ 33.245329][ T495] __sock_create+0x38d/0x770 [ 33.249898][ T495] __sys_socket+0xec/0x190 [ 33.254289][ T495] __x64_sys_socket+0x7a/0x90 [ 33.258935][ T495] do_syscall_64+0x31/0x40 [ 33.263324][ T495] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.269182][ T495] [ 33.271487][ T495] The buggy address belongs to the object at ffff888113f64800 [ 33.271487][ T495] which belongs to the cache kmalloc-1k of size 1024 [ 33.285731][ T495] The buggy address is located 984 bytes inside of [ 33.285731][ T495] 1024-byte region [ffff888113f64800, ffff888113f64c00) [ 33.299068][ T495] The buggy address belongs to the page: [ 33.304908][ T495] page:ffffea00044fd800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113f60 [ 33.315203][ T495] head:ffffea00044fd800 order:3 compound_mapcount:0 compound_pincount:0 [ 33.323674][ T495] flags: 0x4000000000010200(slab|head) [ 33.329114][ T495] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 33.337677][ T495] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 33.346249][ T495] page dumped because: kasan: bad access detected [ 33.352732][ T495] page_owner tracks the page as allocated [ 33.358542][ T495] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 267, ts 32786946622, free_ts 32752187654 [ 33.378923][ T495] prep_new_page+0x179/0x180 [ 33.383492][ T495] get_page_from_freelist+0x223b/0x23d0 [ 33.389019][ T495] __alloc_pages_nodemask+0x290/0x620 [ 33.394365][ T495] new_slab+0x84/0x3f0 [ 33.398503][ T495] ___slab_alloc+0x2a6/0x450 [ 33.403153][ T495] __slab_alloc+0x63/0xa0 [ 33.407456][ T495] __kmalloc_track_caller+0x1ec/0x320 [ 33.412809][ T495] __alloc_skb+0xdc/0x520 [ 33.417112][ T495] sk_stream_alloc_skb+0x21a/0xb70 [ 33.422198][ T495] tcp_sendmsg_locked+0xca7/0x3500 [ 33.427290][ T495] tcp_sendmsg+0x2f/0x50 [ 33.431506][ T495] inet_sendmsg+0xa5/0xc0 [ 33.435810][ T495] sock_write_iter+0x2a6/0x3a0 [ 33.440548][ T495] vfs_write+0x758/0xdc0 [ 33.444770][ T495] ksys_write+0x149/0x250 [ 33.449073][ T495] __x64_sys_write+0x7b/0x90 [ 33.453652][ T495] page last free stack trace: [ 33.458306][ T495] __free_pages_ok+0x80b/0x830 [ 33.463041][ T495] __free_pages+0xd8/0x3b0 [ 33.467429][ T495] __free_slab+0xcf/0x190 [ 33.471751][ T495] unfreeze_partials+0x15f/0x190 [ 33.476660][ T495] put_cpu_partial+0xc1/0x180 [ 33.481308][ T495] __slab_free+0x2c9/0x3a0 [ 33.485697][ T495] ___cache_free+0x10e/0x130 [ 33.490276][ T495] qlink_free+0x50/0x90 [ 33.494494][ T495] qlist_free_all+0x5f/0xb0 [ 33.499062][ T495] kasan_quarantine_reduce+0x14a/0x160 [ 33.504493][ T495] __kasan_slab_alloc+0x2f/0xf0 [ 33.509317][ T495] slab_post_alloc_hook+0x5d/0x2f0 [ 33.514402][ T495] kmem_cache_alloc+0x162/0x2d0 [ 33.519229][ T495] getname_flags+0xb9/0x500 [ 33.523711][ T495] getname+0x19/0x20 [ 33.527586][ T495] do_sys_openat2+0xde/0x750 [ 33.532148][ T495] [ 33.534463][ T495] Memory state around the buggy address: [ 33.540072][ T495] ffff888113f64a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.548559][ T495] ffff888113f64b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.556636][ T495] >ffff888113f64b80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 33.565194][ T495] ^ [ 33.572103][ T495] ffff888113f64c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 33.580137][ T495] ffff888113f64c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 33.588178][ T495] ================================================================== [ 33.596212][ T495] Disabling lock debugging due to kernel taint [ 33.672474][ T326] usb 4-1: USB disconnect, device number 2