last executing test programs: 1.236186739s ago: executing program 2 (id=278): write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44044}, 0x404c080) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl(r5, 0x3b8e, &(0x7f0000000880)="10") write$FUSE_LSEEK(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r7, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe, 0x6}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x33}}}], 0x18}}], 0x1, 0x4001c00) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0129b10000000000000007000000040001800800040003000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = fsopen(&(0x7f0000000400)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x1, 0x0) fchdir(r11) r12 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x101000, 0x100) getdents64(r12, &(0x7f0000000500)=""/50, 0x32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder1\x00', 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.051784136s ago: executing program 2 (id=279): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote, r2}, 0x14) close(r1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 968.533328ms ago: executing program 2 (id=280): capset(&(0x7f0000000380)={0x19980330}, &(0x7f00000003c0)={0x6, 0x6, 0x2005, 0x87, 0xffffffff, 0x40}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe8, 0x0, &(0x7f0000000540)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8eef9757a601bee93639000195bbd000000003632b69f0700062818f298ed3cf2be3f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94df97f6296b9bc0a0aa770b5588c5b3ca96e7e20df71b37ba8bb62cd98e8a769e328b576d95a704d70e2bf262449c11e043581b052dd0a0b442c1b77214b25c8b3af9b1221037c7c73ef3198a305c307d04359d34d82eb73831e60655d8d9cf32944ba083d99b79ebe813c1d6a87b7a23206895d3d3b4e2670f11302c5fffd356d012a827b235", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x12b082) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x2) 921.947704ms ago: executing program 2 (id=281): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xc417, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) mmap(&(0x7f000000a000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x8042, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000bc0)={0xffffffff, 0x5, 0x800000800000, 0x6, 0xfff, 0x7}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000c00)={0x1, 0x5c, "4e8bdf61cc16feb80cc518466b97749f4f60b30e9420eaff450b559827c0a0485e61aa592a22fe946357c54dbf8dc0dbac285c5ca48c3095e2c91576db81c87fadbe14089de2cb27608c444b080da575ee54b9a81fa30d919809aa0d"}, &(0x7f0000000c80)=0x64) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f00000000c0)=0x100000001, 0x4) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000940)='syz_tun\x00', 0x10) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000980)={0x1, {{0xa, 0x4e21, 0xb11, @mcast2, 0x200}}, {{0xa, 0x4e1e, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, 0x108) bind$inet6(r3, &(0x7f0000000ac0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000b00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_ra}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x8, &(0x7f0000000040)=@raw=[@printk={@lld}], &(0x7f0000000080)='GPL\x00', 0x8, 0xaa, &(0x7f0000000600)=""/170, 0x41100, 0x39, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x9, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r5], 0x0, 0x10, 0x200}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000380)={0x9, [[0x9, 0x4, 0x5, 0x1, 0x7, 0x10, 0x8000, 0x7], [0x400, 0xb8a, 0x401, 0x0, 0x7f, 0x5, 0x8d2c, 0x4], [0x80000000, 0x799, 0x8, 0x6, 0x62a17e7b, 0x43, 0x2, 0x7]], '\x00', [{0xcd3, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x0, 0x0, 0x1, 0x1}, {0xffff3741, 0xa400, 0x1}, {0x6cd4b727, 0x4}, {0x1, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x4, 0xa6, 0x1, 0x1, 0x1}, {0xfffffffe, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xd08, 0x0, 0x0, 0x1, 0x1}, {0x2, 0xb, 0x1, 0x0, 0x1}, {0x2, 0x141, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x5d, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x1}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xc417, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}, {0x0, 0x989680}], '\x00', 0xffffffff}) (async) mmap(&(0x7f000000a000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x8042, 0x48) (async) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000bc0)={0xffffffff, 0x5, 0x800000800000, 0x6, 0xfff, 0x7}) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000c00)={0x1, 0x5c, "4e8bdf61cc16feb80cc518466b97749f4f60b30e9420eaff450b559827c0a0485e61aa592a22fe946357c54dbf8dc0dbac285c5ca48c3095e2c91576db81c87fadbe14089de2cb27608c444b080da575ee54b9a81fa30d919809aa0d"}, &(0x7f0000000c80)=0x64) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f00000000c0)=0x100000001, 0x4) (async) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000940)='syz_tun\x00', 0x10) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000980)={0x1, {{0xa, 0x4e21, 0xb11, @mcast2, 0x200}}, {{0xa, 0x4e1e, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, 0x108) (async) bind$inet6(r3, &(0x7f0000000ac0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) (async) syz_emit_ethernet(0x46, &(0x7f0000000b00)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_ra}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'syz_tun\x00'}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{}, &(0x7f0000000780), &(0x7f00000007c0)='%-010d \x00'}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x8, &(0x7f0000000040)=@raw=[@printk={@lld}], &(0x7f0000000080)='GPL\x00', 0x8, 0xaa, &(0x7f0000000600)=""/170, 0x41100, 0x39, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x9, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r5], 0x0, 0x10, 0x200}, 0x94) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000380)={0x9, [[0x9, 0x4, 0x5, 0x1, 0x7, 0x10, 0x8000, 0x7], [0x400, 0xb8a, 0x401, 0x0, 0x7f, 0x5, 0x8d2c, 0x4], [0x80000000, 0x799, 0x8, 0x6, 0x62a17e7b, 0x43, 0x2, 0x7]], '\x00', [{0xcd3, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x0, 0x0, 0x1, 0x1}, {0xffff3741, 0xa400, 0x1}, {0x6cd4b727, 0x4}, {0x1, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x4, 0xa6, 0x1, 0x1, 0x1}, {0xfffffffe, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x4, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xd08, 0x0, 0x0, 0x1, 0x1}, {0x2, 0xb, 0x1, 0x0, 0x1}, {0x2, 0x141, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x5d, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x1}) (async) 769.705647ms ago: executing program 3 (id=283): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000008a80)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008b00)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bacff6b94ff5e41400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011e567c4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006208000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f000000ab00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000abc0)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f000000ac00)='./file0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000000ac40)={0x1, &(0x7f000000ac80)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 682.015646ms ago: executing program 3 (id=284): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x816a35326c64036e, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r0, 0xc0106440, &(0x7f00000000c0)={0x0, 0x1, &(0x7f0000000040)}) (async) read$snddsp(0xffffffffffffffff, &(0x7f0000000100)=""/203, 0xcb) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000200)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4001, 0x0) write$tun(r1, &(0x7f0000000280)={@void, @val={0x1, 0x3, 0xff, 0x1, 0x98a1, 0x29fd}, @mpls={[{0x1}, {0x9, 0x0, 0x1}, {0x3}, {0x8ab, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x40}, {0x73b}, {0x40, 0x0, 0x1}], @llc={@snap={0x0, 0x1, 'n6', "9586bf", 0x194, "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"}}}}, 0x1033) (async) r2 = syz_open_dev$mtd(&(0x7f00000012c0), 0x6, 0x208100) ioctl$MEMERASE(r2, 0x40084d02, &(0x7f0000001300)={0x4, 0x7}) (async) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000001340)={0x3, 0x5, 0x1, 0x1}) (async) mount$overlay(0x0, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0), 0x200002, &(0x7f0000001400)={[{@xino_on}, {@volatile}, {@verity_require}], [{@obj_role={'obj_role', 0x3d, '/dev/dri/renderD128\x00'}}]}) (async) r3 = syz_open_dev$vcsa(&(0x7f0000001440), 0x100, 0x10800) stat(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000001480)='./file0\x00', r4, 0xffffffffffffffff, 0x100) (async) readv(r1, &(0x7f0000001740)=[{&(0x7f0000001580)=""/194, 0xc2}, {&(0x7f0000001680)=""/162, 0xa2}], 0x2) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8010, r2, 0xf275f000) (async) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000001780)=0x9, &(0x7f00000017c0)=0x4) (async) ioctl$COMEDI_LOCK(r3, 0x6405) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$CDROMPAUSE(r3, 0x5301) (async) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000001800)={0x0, 0x8}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001840)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$CEC_G_MODE(r6, 0x80046108, &(0x7f0000001880)) (async) write$selinux_create(r6, &(0x7f00000018c0)=@objname={'system_u:object_r:semanage_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x3, 0x20, './file0\x00'}, 0x67) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001940)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r4, r5}}, './file0\x00'}) (async) read$FUSE(r3, &(0x7f0000001a40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)='system.posix_acl_access\x00', &(0x7f0000003a80)={{}, {0x1, 0x7}, [{0x2, 0x0, r7}, {0x2, 0x4, r4}, {0x2, 0x0, r4}], {0x4, 0x1}, [{0x8, 0x1, 0xee01}, {0x8, 0x4, r8}], {0x10, 0x4}, {0x20, 0x1}}, 0x4c, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000003b00)={0x10001, 0x3, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000003b40)='./file0\x00', 0x80, 0x80) 681.691579ms ago: executing program 0 (id=285): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002540)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x9, 0x4, 0x0, 0x0, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xffffffffffffffff}]}}}]}, 0x58}}, 0x40) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={0x2}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={0x1, 0x2, 0x1}, &(0x7f0000000500)=0xc) r3 = epoll_create(0x2) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060300000000000000000007000000140007800500150002000000080012400000000414000300686173683a69702c706f72742c697000050005000200000005000400050000000900020073797a31000000000500010007"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1001}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0xe}, {0xb, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) r10 = socket(0x2, 0x802, 0xfffffff9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000001540)={r11, 0x1}) r12 = syz_clone(0x102000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r12, 0x0) ptrace$pokeuser(0x6, r12, 0x3, 0x2) sendfile(r5, r10, &(0x7f0000000100)=0x8, 0x7fff) 611.731261ms ago: executing program 3 (id=286): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000480)={&(0x7f0000000400)=""/74, 0x4a}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000019c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="2623bd3c40d069cbaf7862ab448dcc78a33171092bdb4d0fae79411d060daf7423bc12a4d70e354c07887999e9b68e95c229ef95232c0a70b825d38b1f6df43cf83e88952e4d2a995b0829405aaa710bfdd7f2550b27cb1e03e18fd39e0f7a994383ae64e120b710c5ab6600b76c51ebabee84cf106e5dc43aa035e838a2fac62c8d13b6303f4fee44b5fc6b9d6cc13a24ae9f5f79bbae18aef93f2b62997ea8d4310653644979406f", @ANYRES16=r5, @ANYBLOB="000800000000000000001400000000000000e8a32397d0777447eecbed570c730395c766a27e5bf87872d9dac4293b305577a0902392f94d976c5d", @ANYRES32=r6, @ANYBLOB="0800050004000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="2623bd3c40d069cbaf7862ab448dcc78a33171092bdb4d0fae79411d060daf7423bc12a4d70e354c07887999e9b68e95c229ef95232c0a70b825d38b1f6df43cf83e88952e4d2a995b0829405aaa710bfdd7f2550b27cb1e03e18fd39e0f7a994383ae64e120b710c5ab6600b76c51ebabee84cf106e5dc43aa035e838a2fac62c8d13b6303f4fee44b5fc6b9d6cc13a24ae9f5f79bbae18aef93f2b62997ea8d4310653644979406f", @ANYRES16=r5, @ANYBLOB="000800000000000000001400000000000000e8a32397d0777447eecbed570c730395c766a27e5bf87872d9dac4293b305577a0902392f94d976c5d", @ANYRES32=r6, @ANYBLOB="0800050004000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)={0x88, r5, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4d, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @random=0xc9e, 0x1, @void, @void, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0x3, {0x2, 0x8e, 0xa2}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xfe, 0xfd, 0x1, 0x7, 0x48}}, @val={0x76, 0x6, {0x0, 0x6, 0x41, 0x101}}}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x39db77225c63fa4c) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) fcntl$setpipe(r2, 0x407, 0x7000000) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0100fe7900"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x20000, 0x4}) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000001c40)) (async) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000001c40)) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x6c, r5, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x8}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "484d6afd67535fa15da557d928"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d392d23d1b12b907c0433d0518"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004030}, 0x20008044) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x26, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8000000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x86b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x51}}}, &(0x7f0000000280)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rpc\x00') r10 = openat(r9, &(0x7f0000000380)='auth.unix.ip/channel\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000020c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002080)={&(0x7f0000001fc0)={0x90, 0x15, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x70, 0x8, "c12eecc8e58ced038497d7b086705cab20dc5b9e05a35f9ade4042afc8ad71ad1956c2d9935afe5c71502becf1128ca860fdec63a496046f5125cb13ecaf1bbc1dfd91d0d22a77b5c3946d286fe3d3fec4c19a64867110f4ed45f277caa77cf66c90cbff1cbafefd073b6e8d"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x48080}, 0x20048010) write(r10, &(0x7f00000003c0)=' f 0::7.0.0.1 -\\000000\\0 l\\calhost\n', 0x24) (async) write(r10, &(0x7f00000003c0)=' f 0::7.0.0.1 -\\000000\\0 l\\calhost\n', 0x24) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f00000002c0)={0x0, 0x6566, 0x8, 0x2, 0x1c6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8eca, 0x20, 0x3, 0x1b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3f3d, 0x4, 0x0, 0xaf, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbc4b, 0x4000, 0x0, 0x2a3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe2df, 0x80, 0x2, 0x1a, 0x0, r10}}], 0x4, &(0x7f0000001800)={0x2e, 0xfc84bb862e21c2ab, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x0, 0xb9c, 0x0, &(0x7f0000000800)=@buf_1k="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"}}, &(0x7f0000001e80)) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r11) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r11) sendmsg$IEEE802154_LLSEC_LIST_DEV(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)={0x14, r12, 0x70b, 0x70bd25, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x240040f0) (async) sendmsg$IEEE802154_LLSEC_LIST_DEV(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)={0x14, r12, 0x70b, 0x70bd25, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x240040f0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r13, 0x5760, 0x5f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010025bd7000fedbdf2501000000100002800c000180080001000500000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8050) 610.824385ms ago: executing program 0 (id=287): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xe0042, 0x1ff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r1, 0x0, 0x13, 0x0, &(0x7f00000000c0)) close(r0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x103401, 0x0) write$dsp(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7b964305"}, 0x0, 0x2, {0x0}}) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000001c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x8, 0x42, 0x6f}, 0x2c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000200)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x3d}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000280)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x4, 0x6, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000300)={&(0x7f0000000340)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) execveat(r6, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x100) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 610.484368ms ago: executing program 3 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="060000000300010006", 0x9) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newneigh={0x40, 0x1c, 0x8, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x0, 0x2, 0xa}, [@NDA_PROBES={0x8, 0x4, 0x2}, @NDA_VNI={0x8, 0x7, 0x7}, @NDA_DST_IPV6={0x14, 0x1, @empty}]}, 0x40}}, 0x0) 551.721738ms ago: executing program 3 (id=289): capset(&(0x7f0000000380)={0x19980330}, &(0x7f00000003c0)={0x6, 0x6, 0x2005, 0x87, 0xffffffff, 0x40}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe8, 0x0, &(0x7f0000000540)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8eef9757a601bee93639000195bbd000000003632b69f0700062818f298ed3cf2be3f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94df97f6296b9bc0a0aa770b5588c5b3ca96e7e20df71b37ba8bb62cd98e8a769e328b576d95a704d70e2bf262449c11e043581b052dd0a0b442c1b77214b25c8b3af9b1221037c7c73ef3198a305c307d04359d34d82eb73831e60655d8d9cf32944ba083d99b79ebe813c1d6a87b7a23206895d3d3b4e2670f11302c5fffd356d012a827b235", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x12b082) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x2) 550.372889ms ago: executing program 0 (id=290): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x80010, 0xffffffffffffffff, 0xddaa7000) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9c, 0x8a800) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) (async) pread64(r1, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 549.523663ms ago: executing program 3 (id=291): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000680)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000006c0)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000700)=@assoc_value={0x0}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000780)={r3, 0x6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = userfaultfd(0x80001) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x4080) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000480)=0x5, 0x4) read(r6, &(0x7f00000004c0)=""/90, 0x5a) bind$can_j1939(r6, &(0x7f0000000540)={0x1d, r7, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000580)=0x1, 0x4) sendmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000600)=[{&(0x7f0000000640)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) mlock(&(0x7f0000e18000/0x4000)=nil, 0x4000) read(r4, &(0x7f0000000180)=""/145, 0x91) r8 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r8, 0x0) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000, 0x1}) 540.528159ms ago: executing program 0 (id=292): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000008a80)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008b00)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bacff6b94ff5e41400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011e567c4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006208000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f000000ab00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000abc0)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f000000ac00)='./file0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000000ac40)={0x1, &(0x7f000000ac80)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 471.541367ms ago: executing program 0 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000400)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) (async) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r3, &(0x7f0000000500)="dc", 0x1) (async) splice(r2, 0x0, r1, &(0x7f0000000540)=0x8008, 0x4, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0xe, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c8}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x5, 0xd}, {0x0, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) r8 = creat(&(0x7f0000000700)='./bus\x00', 0x0) (async) r9 = fanotify_init(0xf00, 0x2) fanotify_mark(r9, 0x105, 0x8971, r8, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xba, 0xba, 0x3, [@const={0xf, 0x0, 0x0, 0xa, 0x5}, @datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x5, 0xa, 0xa6b}], "4a541a"}, @typedef={0x9, 0x0, 0x0, 0x8, 0x3}, @datasec={0xe, 0x2, 0x0, 0xf, 0x3, [{0x40, 0x5, 0x585}, {0x2, 0x2, 0x101}], "dcbb62"}, @func={0x5, 0x0, 0x0, 0xc, 0x3}, @struct={0x0, 0x6, 0x0, 0x4, 0x1, 0x9, [{0x10, 0x2, 0x3}, {0xa, 0x5, 0x7}, {0x2, 0x2, 0x9}, {0xa, 0x4, 0x9}, {0xc, 0x4, 0x80000000}, {0x5, 0x3, 0x7e5}]}]}, {0x0, [0x30]}}, &(0x7f0000000680)=""/21, 0xd7, 0x15, 0x0, 0x40}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x48011}, 0x40008090) 470.253311ms ago: executing program 0 (id=296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x102, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRES16=r1]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4000890, &(0x7f0000000600)={0x11, 0x8, r3, 0x1, 0xda}, 0x14) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r6, &(0x7f0000000240)='lz4', 0x3) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="3cfe0c63ac674fb2b97ffad24d5ab3f66ef90a81865eacabcfd2d10579b9de23d1e1fa0b448fb1503f45d7a9b0aaf912f0c52369fb7011ce0d55cdc1de24343f742a75588489dfaad017cf190ff69ad9cb392b42aa05df2bed329fef28b18f231559478f661abda6e25bfa7864495991e79cc14383aac43eb839932c97404c5f07a9bbed848e87a0b1c0269f3a547e493fa12b5490abbe474b86bd69a35422a3917c4bca6356ad83da1d5b43fbcb30f3d6bfcf662bf400", 0xb7) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$FBIOGET_FSCREENINFO(r7, 0x4602, &(0x7f0000000180)) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fbdbdf253f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c1599000100000009000000"], 0x28}, 0x1, 0x0, 0x0, 0x1805}, 0x271d06846df4b024) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04000300d3"], 0x2d) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000380)={0xd4b, 0x80000000}) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000040)={0x4000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r9, 0x40a0ae49, &(0x7f0000000080)={0x10004, 0x7, 0x10000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x2000, r10}) accept4$nfc_llcp(r8, 0x0, 0x0, 0x80800) 291.449741ms ago: executing program 1 (id=298): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000340)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x66, 0xfffe, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @redirect={0x5, 0x0, 0x0, @rand_addr=0x64010100, {0x27, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x4, 0x1, @multicast1, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x2c, 0xaf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast}, {@empty, 0xfffffffc}, {@multicast2, 0xffffffff}, {@private=0xa010102, 0x5}]}, @lsrr={0x83, 0x27, 0xf3, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x75, 0x3, 0x9, [{@local}, {@rand_addr=0x64010101, 0x2}, {@remote}, {@remote, 0x200}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x80000000}, {@remote, 0x9}]}]}}}}}, 0xc2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/raw6\x00') pread64(r3, &(0x7f0000000200)=""/237, 0xed, 0x5) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 111.652456ms ago: executing program 1 (id=299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000d6bd0000009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) pipe(&(0x7f0000001840)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001880)={r1, &(0x7f00000018c0), &(0x7f0000001900)=@udp=r2, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x6, 0xc, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{r1}, &(0x7f0000001b00), &(0x7f0000001b40)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001b80)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001bc0)={r3, r5, 0x25, 0x4, @void}, 0x2a) syz_emit_ethernet(0xdc5, &(0x7f0000004740)={@local, @local, @void, {@ipv4={0x800, @generic={{0x16, 0x4, 0x0, 0x0, 0xdb7, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}, {[@cipso={0x86, 0x41, 0xffffffffffffffff, [{0x6, 0x4, "31b6"}, {0x1, 0x3, "95"}, {0x0, 0xa, "3ddf947f079c8139"}, {0x5, 0x10, "d6d4e4e64d7b4fa341f01d62c6b1"}, {0x7, 0x6, "9ebf03ab"}, {0x7, 0x8, "2a7142e09c29"}, {0x5, 0x7, "0e6e8f1408"}, {0x0, 0x5, "3e69a3"}]}]}}, "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"}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000b40), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000018c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000029c0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000002a00)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000002a40)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000002ac0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000002b00)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000002b40)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000083b00000008000300", @ANYRES32=r9, @ANYBLOB="25003300d00000000050505050505000000376c0bb482acf6855be330658ee01694d004302260d000000"], 0x44}}, 0x0) r10 = memfd_create(&(0x7f0000000100)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r10, 0x0) set_mempolicy(0x4000, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_dev$video4linux(&(0x7f00000000c0), 0xffffffffffffffff, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) ioctl$VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000000)={0x3, 0x8}) 58.940044ms ago: executing program 1 (id=300): capset(&(0x7f0000000380)={0x19980330}, &(0x7f00000003c0)={0x6, 0x6, 0x2005, 0x87, 0xffffffff, 0x40}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x10f, 0x0, &(0x7f0000000540)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8eef9757a601bee93639000195bbd000000003632b69f0700062818f298ed3cf2be3f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94df97f6296b9bc0a0aa770b5588c5b3ca96e7e20df71b37ba8bb62cd98e8a769e328b576d95a704d70e2bf262449c11e043581b052dd0a0b442c1b77214b25c8b3af9b1221037c7c73ef3198a305c307d04359d34d82eb73831e60655d8d9cf32944ba083d99b79ebe813c1d6a87b7a23206895d3d3b4e2670f11302c5fffd356d012a827b235199011ebcdd2d7acdb8f6f2ad2da0ef1ffac4a687847680c3dd3eafa18922a3a0b4228f63a5c45", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x12b082) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x2) 54.691636ms ago: executing program 2 (id=301): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)={0x14, r3, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050) copy_file_range(r1, &(0x7f00000000c0)=0x7, r1, 0x0, 0x7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x3, 0x0, 0x40, 0x0, 0x0, 0x50, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r1, 0x0, 0x3}, @fda={0x66646185, 0xa, 0x0, 0x7}, @flat=@weak_handle={0x77682a85, 0x100, 0x1, 0x1}}, &(0x7f0000000740)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000500)=""/80}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0x7}}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_QUERY(0xffffffffffffffff, 0x23, &(0x7f00000001c0), 0x0) signalfd(r1, &(0x7f00000008c0)={[0x10001]}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 54.219279ms ago: executing program 1 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006a40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000008a80)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008b00)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bacff6b94ff5e41400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011e567c4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006208000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f000000ab00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000abc0)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f000000ac00)='./file0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f000000ac40)={0x1, &(0x7f000000ac80)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 939.775µs ago: executing program 2 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/rom\x00', 0x511000, 0x0) write(r0, &(0x7f00000000c0)='1\x00', 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000700), 0x100, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000740)={0x2c}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r3, &(0x7f00000004c0), 0x0}, 0x20) read(r0, &(0x7f0000000100)=""/100, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/rom\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='1\x00', 0x1) read(r4, &(0x7f0000000200)=""/100, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) mkdir(&(0x7f0000000780)='./my_configfs\x00', 0x176) mount(0x0, &(0x7f00000007c0)='./my_configfs\x00', &(0x7f0000000800)='configfs\x00', 0x10040, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000840)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write$proc_mixer(r6, &(0x7f00000008c0)=ANY=[], 0x1001) ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f0000000640)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r8, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="010026bd7000ffdbdf253d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f0100000008005d000100000008005d0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0x44051) write(r5, &(0x7f00000002c0)='1\x00', 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r10, &(0x7f0000000340)='1\x00', 0x1) 383.604µs ago: executing program 1 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl(r0, 0x3b8e, &(0x7f0000000140)="10") write$FUSE_LSEEK(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl(r2, 0x40104d01, &(0x7f0000000a00)) 0s ago: executing program 1 (id=305): getpid() syz_clone(0x0, &(0x7f0000000900)="1dc52b60ccc7559e481992613cb1160d5d9cb4d267b41fc02fd9d2a85370f8272d850ccc2cc97fffe9749ad8aa3d8d5c377498912c99b1ed30e71597e1ee96571bf113fa83bfeb4e54e83cd0314958a452f194b06f9e3423e3d1f871e2ebf25de97944697c51c2cec023631c9c2c60f81c1a89c289b5501bb900d083a05ad2b9c88d66f31cba78d4b36cab48a201ecc69efbef3ceb178ccca8c403ce7c42b1d0a6b838a23fd67f68f86209f038408bc10e2078f8af5e97977449a946b8d2d6f4679eb52c968b7d8382ddcdfaa6d583ab4a324be663b58ee544c0dec67b546e2a02d97ff1f42f844a340e6577b920", 0xee, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000480)="4320c3b2d4bb078bce87ff00a88d7a76467386a32e52008b2dd283794fca92b6f991305004d34ebd316664ed22c108164502bfeef7c837d0f80aafa41fdf5df1f3d98c8273176f8fa1bee929c849d7926f86ffebbb443cad40f5b3156b7ce57903106e904b7ac2fe0183a8e829da802fd17fe798f342e870860ea339b6843afaaa741f27d644f3ff584e877ae53f38aae37182f76000897c6ba8ac79cafa6a1a5c0e51688b") fcntl$getown(0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xfffffe65) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000c80)={&(0x7f0000000800)="3676be7d8921acae8039da5d0170c860653ae6eb456e79c1", &(0x7f0000000a40)=""/232, &(0x7f0000000b40)="20b023d10acee4596b923b460c6b9ba75967020a381c566c3a3380e838e03b3885b79b82f29a867533423bfb5e65753d5725ffab9a05238b0d9281e169cbec85634478ac32d2551c884289c0905efe4eaf659f490c250bc9943a51e1834d9fb4494ab6b54afa21b5ecb588bccac938", &(0x7f0000000bc0)="f819dba23331a74546cb660dd9640c243ab299b645c58e5397869fa7c8cc1590c3f607ca673c91072774f41f104bdfccaa96dce4b15ad7cad77d236f274815215d5a3e0394bb0d649e1bfa9fbd73d6993a872b4a10ec833f8bad456eb5ebf82a42914bf15428fb", 0xb, r1, 0x4}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x10, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x45, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r2, &(0x7f0000000500), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004c8000/0x1000)=nil, 0x1000, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'veth0_to_batadv\x00'}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000700)={0x8, 0x8b}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./dev\x00', &(0x7f00000006c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/cpu_dma_latency\x00', 0x20c01, 0x0) writev(r5, &(0x7f0000000d40)=[{&(0x7f0000000d80)="ab21057c", 0x4}], 0x1) bind$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @mcast1, 0x7}, 0x1c) listen(r4, 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0xc0000, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000880)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:19862' (ED25519) to the list of known hosts. [ 41.891900][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 41.891920][ T42] audit: type=1400 audit(1791673495.204:141): avc: denied { mounton } for pid=5711 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.893516][ T42] audit: type=1400 audit(1791673495.204:142): avc: denied { mount } for pid=5711 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.895967][ T5711] cgroup: Unknown subsys name 'net' [ 41.897303][ T42] audit: type=1400 audit(1791673495.214:143): avc: denied { unmount } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.048591][ T5711] cgroup: Unknown subsys name 'cpuset' [ 42.052016][ T5711] cgroup: Unknown subsys name 'rlimit' [ 42.219910][ T42] audit: type=1400 audit(1791673495.534:144): avc: denied { setattr } for pid=5711 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.222329][ T42] audit: type=1400 audit(1791673495.534:145): avc: denied { create } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.222370][ T42] audit: type=1400 audit(1791673495.534:146): avc: denied { write } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.222409][ T42] audit: type=1400 audit(1791673495.534:147): avc: denied { read } for pid=5711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.232416][ T42] audit: type=1400 audit(1791673495.544:148): avc: denied { mounton } for pid=5711 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.232968][ T42] audit: type=1400 audit(1791673495.544:149): avc: denied { mount } for pid=5711 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.291727][ T5719] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 42.292772][ T42] audit: type=1400 audit(1791673495.604:150): avc: denied { relabelto } for pid=5719 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 43.102952][ T5711] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.878277][ T5729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.883596][ T5731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.885690][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.886999][ T5735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.888134][ T5735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.890297][ T5735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.890568][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.891887][ T5735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.892033][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.892452][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.894597][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.897443][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.899672][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 46.899681][ T42] audit: type=1400 audit(1791673500.214:159): avc: denied { read } for pid=5725 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.899703][ T42] audit: type=1400 audit(1791673500.214:160): avc: denied { open } for pid=5725 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.899722][ T42] audit: type=1400 audit(1791673500.214:161): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.901565][ T42] audit: type=1400 audit(1791673500.214:162): avc: denied { module_request } for pid=5725 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.901941][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.905815][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.907587][ T5738] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.908239][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.908490][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.909334][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.911012][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.912300][ T5735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.920218][ T42] audit: type=1400 audit(1791673500.234:163): avc: denied { mounton } for pid=5736 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.931955][ T42] audit: type=1400 audit(1791673500.244:164): avc: denied { module_request } for pid=5736 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.932274][ T42] audit: type=1400 audit(1791673500.244:165): avc: denied { module_request } for pid=5726 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.938663][ T42] audit: type=1400 audit(1791673500.254:166): avc: denied { sys_module } for pid=5725 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.528507][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.529186][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.529272][ T5733] bridge_slave_0: entered allmulticast mode [ 47.530548][ T5733] bridge_slave_0: entered promiscuous mode [ 47.565842][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.565887][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.565938][ T5733] bridge_slave_1: entered allmulticast mode [ 47.566650][ T5733] bridge_slave_1: entered promiscuous mode [ 47.576686][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.576733][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.576787][ T5736] bridge_slave_0: entered allmulticast mode [ 47.577602][ T5736] bridge_slave_0: entered promiscuous mode [ 47.578607][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.578669][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.578747][ T5726] bridge_slave_0: entered allmulticast mode [ 47.579800][ T5726] bridge_slave_0: entered promiscuous mode [ 47.581943][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.582003][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.582103][ T5726] bridge_slave_1: entered allmulticast mode [ 47.583275][ T5726] bridge_slave_1: entered promiscuous mode [ 47.611113][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.611373][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.611645][ T5736] bridge_slave_1: entered allmulticast mode [ 47.612518][ T5736] bridge_slave_1: entered promiscuous mode [ 47.628893][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.641457][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.650273][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.650914][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.651566][ T5725] bridge_slave_0: entered allmulticast mode [ 47.652750][ T5725] bridge_slave_0: entered promiscuous mode [ 47.657012][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.657170][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.657232][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.657604][ T5725] bridge_slave_1: entered allmulticast mode [ 47.658775][ T5725] bridge_slave_1: entered promiscuous mode [ 47.675309][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.676740][ T5733] team0: Port device team_slave_0 added [ 47.678591][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.690897][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.700902][ T5733] team0: Port device team_slave_1 added [ 47.737148][ T5726] team0: Port device team_slave_0 added [ 47.738735][ T5736] team0: Port device team_slave_0 added [ 47.739569][ T5726] team0: Port device team_slave_1 added [ 47.741608][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.762267][ T5736] team0: Port device team_slave_1 added [ 47.762777][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.762785][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.762798][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.765584][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.766023][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.766032][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.766048][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.767328][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.767337][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.767353][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.782365][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.782373][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.782386][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.806105][ T5725] team0: Port device team_slave_0 added [ 47.811664][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.811675][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.811693][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.813169][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.813178][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.813195][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.821079][ T5725] team0: Port device team_slave_1 added [ 47.839369][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.839380][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.839397][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.857465][ T5733] hsr_slave_0: entered promiscuous mode [ 47.857961][ T5733] hsr_slave_1: entered promiscuous mode [ 47.858872][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.858882][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.858899][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.913005][ T5736] hsr_slave_0: entered promiscuous mode [ 47.913419][ T5736] hsr_slave_1: entered promiscuous mode [ 47.913817][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 47.913861][ T5736] Cannot create hsr debugfs directory [ 47.918607][ T5726] hsr_slave_0: entered promiscuous mode [ 47.919306][ T5726] hsr_slave_1: entered promiscuous mode [ 47.919775][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 47.919790][ T5726] Cannot create hsr debugfs directory [ 47.977969][ T5725] hsr_slave_0: entered promiscuous mode [ 47.978620][ T5725] hsr_slave_1: entered promiscuous mode [ 47.979058][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 47.979073][ T5725] Cannot create hsr debugfs directory [ 48.199027][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.202405][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.210157][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.216261][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.216925][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.219039][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.219783][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.222324][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.258562][ T5726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.262439][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.262882][ T5726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.265210][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.267774][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.267870][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.268445][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.268535][ T5733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.271472][ T5726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.276128][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.277501][ T5726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.280409][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.327277][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.327322][ T5726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.327421][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.327465][ T5726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.328789][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.331425][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.337925][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.341644][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.342023][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.344328][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.355300][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.360271][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.366651][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.369028][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.371717][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.377614][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.423762][ T5725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.426298][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.434075][ T5725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.435830][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.436366][ T5725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.438976][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.448219][ T5725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.450861][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.472066][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.487623][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.506695][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.508625][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.519086][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.519177][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.527050][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.527093][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.528983][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.529023][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.537782][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.537825][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.555562][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.573463][ T5733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.590187][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.596982][ T5726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.602160][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.605216][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.605292][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.618344][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.618419][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.636545][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.641102][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.641173][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.659122][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.659166][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.812922][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.842522][ T5733] veth0_vlan: entered promiscuous mode [ 48.849733][ T5733] veth1_vlan: entered promiscuous mode [ 48.869864][ T5733] veth0_macvtap: entered promiscuous mode [ 48.872173][ T5733] veth1_macvtap: entered promiscuous mode [ 48.881415][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.888495][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.892795][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.897050][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.915871][ T5740] Bluetooth: hci0: command tx timeout [ 48.982312][ T5726] veth0_vlan: entered promiscuous mode [ 48.983161][ T5736] veth0_vlan: entered promiscuous mode [ 48.990193][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.990208][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.992039][ T5726] veth1_vlan: entered promiscuous mode [ 48.995205][ T5740] Bluetooth: hci2: command tx timeout [ 48.995613][ T5740] Bluetooth: hci1: command tx timeout [ 48.995890][ T65] Bluetooth: hci3: command tx timeout [ 49.004618][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.008103][ T5736] veth1_vlan: entered promiscuous mode [ 49.028047][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.028060][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.040237][ T42] audit: type=1400 audit(1791673502.354:167): avc: denied { mount } for pid=5733 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.041490][ T42] audit: type=1400 audit(1791673502.354:168): avc: denied { mounton } for pid=5733 comm="syz-executor" path="/syzkaller.FwSydw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.055449][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.055730][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.055845][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.055958][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.060798][ T5736] veth0_macvtap: entered promiscuous mode [ 49.062129][ T5726] veth0_macvtap: entered promiscuous mode [ 49.072146][ T5736] veth1_macvtap: entered promiscuous mode [ 49.073378][ T5726] veth1_macvtap: entered promiscuous mode [ 49.089638][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.091478][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.096143][ T5733] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.103886][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.112344][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.113023][ T5725] veth0_vlan: entered promiscuous mode [ 49.130464][ T5725] veth1_vlan: entered promiscuous mode [ 49.134760][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.135033][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.135096][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.135642][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.170649][ T5725] veth0_macvtap: entered promiscuous mode [ 49.178352][ T5725] veth1_macvtap: entered promiscuous mode [ 49.183032][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.183043][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.204775][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.205221][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.206093][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.208158][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.215019][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 49.218609][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 49.219207][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 49.222878][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 49.223549][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.223559][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.251887][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.251899][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.266207][ T5878] ======================================================= [ 49.266207][ T5878] WARNING: The mand mount option has been deprecated and [ 49.266207][ T5878] and is ignored by this kernel. Remove the mand [ 49.266207][ T5878] option from the mount to silence this warning. [ 49.266207][ T5878] ======================================================= [ 49.267386][ T5878] overlayfs: conflicting options: userxattr,redirect_dir=on [ 49.274837][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.274862][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.274880][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.274898][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.274918][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.274943][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.283786][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.283801][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.314152][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.314165][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.358909][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.358924][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.364305][ T5881] process 'syz.3.6' launched './file0' with NULL argv: empty string added [ 49.377525][ T5882] FAULT_INJECTION: forcing a failure. [ 49.377525][ T5882] name failslab, interval 1, probability 0, space 0, times 1 [ 49.377544][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 49.377556][ T5882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.377562][ T5882] Call Trace: [ 49.377566][ T5882] [ 49.377571][ T5882] dump_stack_lvl+0x100/0x190 [ 49.377592][ T5882] should_fail_ex.cold+0x5/0xa [ 49.377607][ T5882] ? __pfx_audit_log_vformat+0x10/0x10 [ 49.377621][ T5882] should_failslab+0xc2/0x120 [ 49.377638][ T5882] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 49.377653][ T5882] ? sidtab_sid2str_get+0x84/0x670 [ 49.377664][ T5882] ? sidtab_sid2str_get+0x17a/0x670 [ 49.377677][ T5882] kmemdup_noprof+0x29/0x60 [ 49.377689][ T5882] sidtab_sid2str_get+0x17a/0x670 [ 49.377701][ T5882] security_sid_to_context_core+0x373/0x700 [ 49.377720][ T5882] avc_audit_post_callback+0x109/0x910 [ 49.377732][ T5882] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 49.377748][ T5882] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 49.377758][ T5882] ? skb_put+0x138/0x180 [ 49.377772][ T5882] ? audit_log_n_string+0x2a3/0x5a0 [ 49.377788][ T5882] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 49.377798][ T5882] common_lsm_audit+0x23f/0x2b0 [ 49.377815][ T5882] ? __pfx_common_lsm_audit+0x10/0x10 [ 49.377835][ T5882] slow_avc_audit+0x186/0x210 [ 49.377847][ T5882] ? __pfx_slow_avc_audit+0x10/0x10 [ 49.377859][ T5882] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 49.377875][ T5882] ? lockdep_hardirqs_on+0x7d/0x110 [ 49.377891][ T5882] ? avc_update_node.isra.0+0x578/0xb90 [ 49.377906][ T5882] audit_inode_permission+0x1ea/0x2a0 [ 49.377919][ T5882] ? __pfx_audit_inode_permission+0x10/0x10 [ 49.377933][ T5882] ? avc_has_perm_noaudit+0x3a2/0x470 [ 49.377961][ T5882] ? avc_has_perm_noaudit+0x145/0x470 [ 49.377977][ T5882] selinux_inode_permission+0x7ed/0x1130 [ 49.377993][ T5882] ? devcgroup_check_permission+0x39/0x440 [ 49.378010][ T5882] ? __pfx_selinux_inode_permission+0x10/0x10 [ 49.378022][ T5882] ? find_held_lock+0x2b/0x80 [ 49.378039][ T5882] ? devcgroup_check_permission+0x174/0x440 [ 49.378057][ T5882] ? match_exception_partial+0x239/0x2d0 [ 49.378077][ T5882] security_inode_permission+0xda/0x250 [ 49.378094][ T5882] inode_permission+0x36c/0x620 [ 49.378108][ T5882] may_open+0x2b8/0x480 [ 49.378120][ T5882] path_openat+0x51f/0x2440 [ 49.378138][ T5882] ? __pfx_path_openat+0x10/0x10 [ 49.378158][ T5882] do_file_open+0x20e/0x430 [ 49.378175][ T5882] ? __pfx_do_file_open+0x10/0x10 [ 49.378201][ T5882] ? _raw_spin_unlock+0x28/0x50 [ 49.378214][ T5882] ? alloc_fd+0x471/0x7a0 [ 49.378234][ T5882] do_sys_openat2+0x10f/0x1e0 [ 49.378244][ T5882] ? __pfx_do_sys_openat2+0x10/0x10 [ 49.378255][ T5882] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 49.378275][ T5882] __x64_sys_openat+0x12d/0x210 [ 49.378286][ T5882] ? __pfx___x64_sys_openat+0x10/0x10 [ 49.378302][ T5882] do_syscall_64+0x123/0x790 [ 49.378320][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.378332][ T5882] RIP: 0033:0x7f112d19e1d9 [ 49.378342][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.378351][ T5882] RSP: 002b:00007f112e027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 49.378367][ T5882] RAX: ffffffffffffffda RBX: 00007f112d425fa0 RCX: 00007f112d19e1d9 [ 49.378375][ T5882] RDX: 0000000000000002 RSI: 0000200000000780 RDI: ffffffffffffff9c [ 49.378382][ T5882] RBP: 00007f112d235888 R08: 0000000000000000 R09: 0000000000000000 [ 49.378390][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.378397][ T5882] R13: 00007f112d426038 R14: 00007f112d425fa0 R15: 00007ffce11da918 [ 49.378412][ T5882] [ 49.388310][ T5882] sctp: [Deprecated]: syz.2.3 (pid 5882) Use of int in max_burst socket option. [ 49.388310][ T5882] Use struct sctp_assoc_value instead [ 49.403655][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 49.404092][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 49.499489][ T5882] ceph: No mds server is up or the cluster is laggy [ 49.556045][ T5899] dlm: non-version read from control device 8224 [ 49.558902][ T5907] dlm: non-version read from control device 8224 [ 49.613557][ T1167] nvmet: connect request for invalid subsystem te! [ 49.617646][ T5911] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "te" [ 49.730235][ T5930] Zero length message leads to an empty skb [ 49.770719][ T5937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15'. [ 49.771027][ T5936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 49.827954][ T5943] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 49.827969][ T5943] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 49.830659][ T5943] vhci_hcd vhci_hcd.0: Device attached [ 49.831519][ T5946] vhci_hcd: cannot find the pending unlink 6 [ 49.838961][ T5946] vhci_hcd: connection closed [ 49.841092][ T5778] vhci_hcd vhci_hcd.0: stop threads [ 49.841323][ T5778] vhci_hcd vhci_hcd.0: release socket [ 49.841345][ T5778] vhci_hcd vhci_hcd.0: disconnect device [ 50.125572][ T4879] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.153760][ T5984] capability: warning: `syz.2.24' uses deprecated v2 capabilities in a way that may be insecure [ 50.156491][ T5984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12321 sclass=netlink_route_socket pid=5984 comm=syz.2.24 [ 50.164488][ T5805] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.200265][ T5986] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 50.286081][ T4879] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.288136][ T4879] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.288157][ T4879] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 50.292345][ T4879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.292358][ T4879] usb 5-1: Product: syz [ 50.292365][ T4879] usb 5-1: Manufacturer: syz [ 50.292372][ T4879] usb 5-1: SerialNumber: syz [ 50.294449][ T5805] usb 8-1: device descriptor read/64, error -71 [ 50.301522][ T4879] cdc_mbim 5-1:1.0: skipping garbage [ 50.498087][ T5953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 50.534526][ T5805] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 50.571391][ T6001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.573601][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 50.573617][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 50.588795][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.590461][ T6000] bond1: (slave bond0): making interface the new active one [ 50.591595][ T6000] bond1: (slave bond0): Enslaving as an active interface with an up link [ 50.665803][ T5805] usb 8-1: device descriptor read/64, error -71 [ 50.682269][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.682713][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.700877][ T4879] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS [ 50.700929][ T4879] cdc_mbim 5-1:1.0: bind() failure [ 50.704611][ T4879] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 50.704641][ T4879] cdc_ncm 5-1:1.1: bind() failure [ 50.760276][ T5725] svc: failed to register nfsdv3 RPC service (errno 111). [ 50.762688][ T5725] svc: failed to register nfsaclv3 RPC service (errno 111). [ 50.762699][ T5725] failed to unregister udp with rpcbind [ 50.762877][ T5725] svc: failed to register nfsdv3 RPC service (errno 97). [ 50.762885][ T5725] svc: failed to register nfsaclv3 RPC service (errno 97). [ 50.762891][ T5725] failed to unregister udp with rpcbind [ 50.775039][ T5805] usb usb8-port1: attempt power cycle [ 50.994511][ T5735] Bluetooth: hci0: command tx timeout [ 51.074935][ T65] Bluetooth: hci2: command tx timeout [ 51.074958][ T65] Bluetooth: hci1: command tx timeout [ 51.075019][ T5735] Bluetooth: hci3: command tx timeout [ 51.114421][ T5805] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 51.124620][ T5834] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.134804][ T5805] usb 8-1: device descriptor read/8, error -71 [ 51.165029][ T50] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 51.276342][ T5834] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 51.278586][ T5834] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 51.278606][ T5834] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 51.280341][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.280359][ T5834] usb 6-1: Product: syz [ 51.280370][ T5834] usb 6-1: Manufacturer: syz [ 51.280381][ T5834] usb 6-1: SerialNumber: syz [ 51.326241][ T50] usb 7-1: unable to get BOS descriptor or descriptor too short [ 51.326668][ T50] usb 7-1: not running at top speed; connect to a high speed hub [ 51.326693][ T50] usb 7-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 51.327774][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.327791][ T50] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 51.330298][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.330317][ T50] usb 7-1: Product: syz [ 51.330329][ T50] usb 7-1: Manufacturer: syz [ 51.330346][ T50] usb 7-1: SerialNumber: syz [ 51.374484][ T5805] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 51.394921][ T5805] usb 8-1: device descriptor read/8, error -71 [ 51.491943][ T5834] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 51.504724][ T5805] usb usb8-port1: unable to enumerate USB device [ 51.542252][ T50] usb 7-1: USB disconnect, device number 2 [ 51.702782][ T5834] usb 6-1: USB disconnect, device number 2 [ 51.707903][ T5834] usblp0: removed [ 52.059648][ T42] kauditd_printk_skb: 147 callbacks suppressed [ 52.059661][ T42] audit: type=1400 audit(1791673505.374:316): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 52.078003][ T42] audit: type=1400 audit(1791673505.394:317): avc: denied { read write } for pid=6028 comm="syz.2.35" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.078180][ T42] audit: type=1400 audit(1791673505.394:318): avc: denied { open } for pid=6028 comm="syz.2.35" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.082809][ T42] audit: type=1400 audit(1791673505.394:319): avc: denied { getopt } for pid=6028 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.177626][ T42] audit: type=1400 audit(1791673505.494:320): avc: denied { ioctl } for pid=6032 comm="syz.2.37" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.187475][ T42] audit: type=1400 audit(1791673505.504:321): avc: denied { ioctl } for pid=6032 comm="syz.2.37" path="/dev/nullb0" dev="devtmpfs" ino=705 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 52.251454][ T6039] fuse: Bad value for 'fd' [ 52.423392][ T42] audit: type=1400 audit(1791673505.734:322): avc: denied { mounton } for pid=6043 comm="syz.1.40" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 52.428119][ T6044] /dev/sr0: Can't open blockdev [ 52.429029][ T42] audit: type=1400 audit(1791673505.744:323): avc: denied { create } for pid=6043 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.429390][ T42] audit: type=1400 audit(1791673505.744:324): avc: denied { ioctl } for pid=6043 comm="syz.1.40" path="socket:[9673]" dev="sockfs" ino=9673 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.429810][ T42] audit: type=1400 audit(1791673505.744:325): avc: denied { write } for pid=6043 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.432493][ T6044] netlink: 'syz.1.40': attribute type 2 has an invalid length. [ 52.432508][ T6044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.40'. [ 52.444448][ T6044] : entered promiscuous mode [ 52.452156][ T6050] netlink: 'syz.1.40': attribute type 2 has an invalid length. [ 52.452171][ T6050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.40'. [ 52.454690][ T6045] /dev/sr0: Can't open blockdev [ 52.507536][ T6056] FAULT_INJECTION: forcing a failure. [ 52.507536][ T6056] name failslab, interval 1, probability 0, space 0, times 0 [ 52.507557][ T6056] CPU: 3 UID: 0 PID: 6056 Comm: syz.2.43 Not tainted syzkaller #0 PREEMPT(full) [ 52.507570][ T6056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.507576][ T6056] Call Trace: [ 52.507581][ T6056] [ 52.507585][ T6056] dump_stack_lvl+0x100/0x190 [ 52.507606][ T6056] should_fail_ex.cold+0x5/0xa [ 52.507621][ T6056] should_failslab+0xc2/0x120 [ 52.507639][ T6056] __kmalloc_cache_noprof+0x91/0x6d0 [ 52.507652][ T6056] ? bpf_init_net+0x56/0x270 [ 52.507666][ T6056] ? __pfx_bpf_init_net+0x10/0x10 [ 52.507677][ T6056] bpf_init_net+0x56/0x270 [ 52.507689][ T6056] ops_init+0x1e2/0x5f0 [ 52.507704][ T6056] setup_net+0x118/0x3a0 [ 52.507717][ T6056] ? __pfx_setup_net+0x10/0x10 [ 52.507733][ T6056] copy_net_ns+0x345/0x7a0 [ 52.507747][ T6056] create_new_namespaces+0x3ea/0xac0 [ 52.507763][ T6056] unshare_nsproxy_namespaces+0xf2/0x220 [ 52.507778][ T6056] ksys_unshare+0x4a2/0xb30 [ 52.507791][ T6056] ? __pfx_ksys_unshare+0x10/0x10 [ 52.507810][ T6056] __x64_sys_unshare+0x31/0x40 [ 52.507823][ T6056] do_syscall_64+0x123/0x790 [ 52.507840][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.507851][ T6056] RIP: 0033:0x7f112d19e1d9 [ 52.507861][ T6056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.507870][ T6056] RSP: 002b:00007f112e027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 52.507898][ T6056] RAX: ffffffffffffffda RBX: 00007f112d425fa0 RCX: 00007f112d19e1d9 [ 52.507906][ T6056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 52.507912][ T6056] RBP: 00007f112d235888 R08: 0000000000000000 R09: 0000000000000000 [ 52.507919][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.507926][ T6056] R13: 00007f112d426038 R14: 00007f112d425fa0 R15: 00007ffce11da918 [ 52.507941][ T6056] [ 52.569471][ T6061] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 52.570868][ T6061] bond2 (unregistering): Released all slaves [ 52.613335][ T6061] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 52.615049][ T6061] bond2 (unregistering): Released all slaves [ 52.676328][ T6061] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 52.677489][ T6061] bond2 (unregistering): Released all slaves [ 52.753788][ T6061] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 52.755228][ T6061] bond2 (unregistering): Released all slaves [ 52.842704][ T6061] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 52.843592][ T6061] bond2 (unregistering): Released all slaves [ 52.854475][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.873182][ T979] usb 5-1: USB disconnect, device number 2 [ 52.906167][ T6061] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 52.908373][ T6061] bond2 (unregistering): Released all slaves [ 52.912264][ T6075] fuse: Bad value for 'fd' [ 52.943062][ T6077] netlink: 'syz.0.48': attribute type 2 has an invalid length. [ 52.946363][ T6077] : entered promiscuous mode [ 52.960246][ T6079] bond0: (slave bond_slave_0): Releasing backup interface [ 52.988274][ T6061] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 52.990400][ T6061] bond2 (unregistering): Released all slaves [ 53.005942][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.010015][ T6088] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 53.010074][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.010095][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.010110][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.010135][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.012716][ T10] usb 7-1: config 0 descriptor?? [ 53.022261][ T6088] openvswitch: netlink: IPv4 frag type 17 is out of range max 2 [ 53.058991][ T6061] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 53.059804][ T6061] bond2 (unregistering): Released all slaves [ 53.084580][ T5735] Bluetooth: hci0: command tx timeout [ 53.101999][ T6061] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 53.103832][ T6061] bond2 (unregistering): Released all slaves [ 53.164533][ T5740] Bluetooth: hci1: command tx timeout [ 53.164556][ T5740] Bluetooth: hci2: command tx timeout [ 53.164621][ T5735] Bluetooth: hci3: command tx timeout [ 53.202296][ T6061] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 53.203801][ T6061] bond2 (unregistering): Released all slaves [ 53.280769][ T6061] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 53.282608][ T6061] bond2 (unregistering): Released all slaves [ 53.351585][ T6061] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 53.353343][ T6061] bond2 (unregistering): Released all slaves [ 53.443226][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 53.568525][ T6107] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 53.568545][ T6107] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 53.568723][ T6107] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 53.568742][ T6107] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 53.601717][ T6111] fuse: Bad value for 'fd' [ 53.630854][ T5805] usb 7-1: USB disconnect, device number 3 [ 53.743639][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 53.837871][ T6130] Bluetooth: MGMT ver 1.23 [ 53.839131][ T6130] Bluetooth: hci0: Invalid link key type 20 for 66:55:44:33:22:11 [ 53.859241][ T6128] fuse: Unknown parameter './file0' [ 54.154095][ T6156] lo: entered allmulticast mode [ 54.388249][ T6181] __nla_validate_parse: 1 callbacks suppressed [ 54.388262][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'. [ 54.447107][ T6181] netlink: 'syz.3.73': attribute type 2 has an invalid length. [ 54.843025][ T6210] bridge_slave_0: left allmulticast mode [ 54.843049][ T6210] bridge_slave_0: left promiscuous mode [ 54.843214][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.852445][ T6210] bridge_slave_1: left allmulticast mode [ 54.852466][ T6210] bridge_slave_1: left promiscuous mode [ 54.852811][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.862639][ T6210] bond0: (slave bond_slave_0): Releasing backup interface [ 54.870077][ T6210] bond0: (slave bond_slave_1): Releasing backup interface [ 54.878253][ T6210] team0: Port device team_slave_0 removed [ 54.881857][ T6210] team0: Port device team_slave_1 removed [ 54.882574][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.882591][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.885103][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.885117][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.888585][ T6210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.909203][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.79'. [ 54.933784][ T6210] team0: Mode changed to "activebackup" [ 55.015101][ T6214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.80'. [ 55.244756][ T65] Bluetooth: hci2: command tx timeout [ 55.244786][ T65] Bluetooth: hci1: command tx timeout [ 55.244828][ T5735] Bluetooth: hci3: command tx timeout [ 55.292070][ T5735] Bluetooth: hci2: Unable to find connection for big 0x00 [ 55.610588][ T6233] loop0: detected capacity change from 0 to 4096 [ 55.629874][ T6233] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 55.629902][ T6233] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 55.629912][ T6233] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 55.630023][ T6233] loop0: [ 55.672557][ T6236] vxcan1: tx drop: invalid sa for name 0x0000020000000000 [ 55.672688][ T6237] vxcan1: tx drop: invalid sa for name 0x0000020000000000 [ 55.706727][ T6240] tun0: tun_chr_ioctl cmd 1074025675 [ 55.706746][ T6240] tun0: persist enabled [ 55.760261][ T6240] 9p: Unknown uid 00000000004294967295 [ 55.862719][ T6254] overlayfs: upper fs does not support file handles, falling back to index=off. [ 55.862732][ T6254] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 55.918768][ T6255] warning: `syz.3.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.984448][ T50] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.134485][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 56.135062][ T50] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 56.135963][ T50] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.135981][ T50] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 56.136011][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.136041][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.148891][ T50] hub 5-1:1.0: bad descriptor, ignoring hub [ 56.148911][ T50] hub 5-1:1.0: probe with driver hub failed with error -5 [ 56.149301][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 56.149312][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 56.158894][ T50] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 56.158909][ T50] cdc_wdm 5-1:1.0: Unknown control protocol [ 56.598826][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 56.609593][ T50] libceph: connect (1)[c::]:6789 error -101 [ 56.609762][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 56.610105][ T50] libceph: connect (1)[c::]:6789 error -101 [ 56.610235][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 56.875496][ T2405] libceph: connect (1)[c::]:6789 error -101 [ 56.875585][ T2405] libceph: mon0 (1)[c::]:6789 connect error [ 56.889975][ T6257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.002884][ T50] usb 5-1: USB disconnect, device number 3 [ 57.065188][ T6314] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 57.067805][ T42] kauditd_printk_skb: 106 callbacks suppressed [ 57.067820][ T42] audit: type=1400 audit(1791673510.384:432): avc: denied { create } for pid=6313 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.068163][ T42] audit: type=1400 audit(1791673510.384:433): avc: denied { connect } for pid=6313 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.068436][ T42] audit: type=1400 audit(1791673510.384:434): avc: denied { read } for pid=6313 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.120379][ T42] audit: type=1400 audit(1791673510.434:435): avc: denied { write } for pid=6313 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.135346][ T50] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 57.135998][ T6312] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 57.141802][ T6312] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 57.141860][ T6312] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 57.142067][ T6312] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref] [ 57.160279][ T6312] pci 0000:00:03.0: Adding to iommu group 3 [ 57.172011][ T6312] pci 0000:00:03.0: BAR 4 [mem 0x380800004000-0x380800007fff 64bit pref]: assigned [ 57.174201][ T6312] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 57.179100][ T6312] pci 0000:00:03.0: BAR 0 [io 0x2020-0x203f]: assigned [ 57.295348][ T50] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 57.297941][ T50] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.297953][ T50] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 57.297973][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.297986][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 57.298004][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.299759][ T6267] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.303119][ T50] hub 5-1:1.0: bad descriptor, ignoring hub [ 57.303130][ T50] hub 5-1:1.0: probe with driver hub failed with error -5 [ 57.303360][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 57.303368][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 57.308141][ T50] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 57.308172][ T50] cdc_wdm 5-1:1.0: Unknown control protocol [ 57.342337][ T42] audit: type=1400 audit(1791673510.654:436): avc: denied { mount } for pid=6318 comm="syz.3.100" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 57.360520][ T42] audit: type=1400 audit(1791673510.674:437): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 57.381385][ T6270] ceph: No mds server is up or the cluster is laggy [ 57.396478][ T50] libceph: connect (1)[c::]:6789 error -101 [ 57.396654][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 57.456111][ T42] audit: type=1400 audit(1791673510.774:438): avc: denied { ioctl } for pid=6323 comm="syz.3.102" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.614725][ T50] usb 5-1: USB disconnect, device number 4 [ 57.694886][ T851] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 57.844432][ T851] usb 6-1: Using ep0 maxpacket: 16 [ 57.845046][ T851] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 57.847374][ T851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 57.848968][ T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.848979][ T851] usb 6-1: Product: syz [ 57.848986][ T851] usb 6-1: Manufacturer: syz [ 57.848994][ T851] usb 6-1: SerialNumber: syz [ 57.850262][ T851] usb 6-1: config 0 descriptor?? [ 57.858966][ T851] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 57.858983][ T851] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 58.024645][ T42] audit: type=1400 audit(1791673511.334:439): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 58.060158][ T42] audit: type=1400 audit(1791673511.374:440): avc: denied { execmod } for pid=6345 comm="syz.0.104" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 58.060205][ T42] audit: type=1400 audit(1791673511.374:441): avc: denied { execute } for pid=6345 comm="syz.0.104" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 58.064162][ T6346] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 58.104782][ T851] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 58.182483][ T851] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 58.182526][ T851] em28xx 6-1:0.0: board has no eeprom [ 58.212048][ T6356] overlayfs: missing 'lowerdir' [ 58.254449][ T851] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 58.254472][ T851] em28xx 6-1:0.0: dvb set to bulk mode. [ 58.259972][ T979] em28xx 6-1:0.0: Binding DVB extension [ 58.276304][ T851] usb 6-1: USB disconnect, device number 3 [ 58.279703][ T851] em28xx 6-1:0.0: Disconnecting em28xx [ 58.299400][ T979] em28xx 6-1:0.0: Registering input extension [ 58.299575][ T851] em28xx 6-1:0.0: Closing input extension [ 58.327033][ T851] em28xx: Freeing device [ 58.336238][ T6362] ip6t_hbh: unknown flags 83 [ 58.347281][ T6371] ip6t_hbh: unknown flags 83 [ 58.494488][ T50] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.664470][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 58.664963][ T50] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 58.666153][ T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 58.666169][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 58.667803][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.667815][ T50] usb 5-1: Product: syz [ 58.667822][ T50] usb 5-1: Manufacturer: syz [ 58.667829][ T50] usb 5-1: SerialNumber: syz [ 58.671194][ T50] usb 5-1: config 0 descriptor?? [ 58.684685][ T851] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 58.709459][ T6381] CIFS: Attempting to mount //127.0.0.1/share [ 58.738978][ T6384] block device autoloading is deprecated and will be removed. [ 58.739613][ T6382] block device autoloading is deprecated and will be removed. [ 58.764712][ T6383] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 58.781927][ T6381] CIFS: VFS: cifs_mount failed w/return code = -112 [ 58.854409][ T851] usb 6-1: Using ep0 maxpacket: 16 [ 58.855156][ T851] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 58.855912][ T851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 58.857438][ T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.857450][ T851] usb 6-1: Product: syz [ 58.857457][ T851] usb 6-1: Manufacturer: syz [ 58.857464][ T851] usb 6-1: SerialNumber: syz [ 58.858842][ T851] usb 6-1: config 0 descriptor?? [ 58.863302][ T851] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 58.863318][ T851] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 58.880499][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 58.882305][ T50] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input6 [ 58.889952][ T50] imon:send_packet: packet tx failed (-71) [ 58.904408][ T50] imon 5-1:0.0: panel buttons/knobs setup failed [ 58.954606][ T50] rc_core: IR keymap rc-imon-pad not found [ 58.954622][ T50] Registered IR keymap rc-empty [ 58.955184][ T50] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 58.955199][ T50] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 58.956058][ T50] imon:send_packet: packet tx failed (-71) [ 58.977735][ T50] imon 5-1:0.0: remote input dev register failed [ 58.977831][ T50] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 58.991036][ T50] imon 5-1:0.0: unable to initialize intf0, err 0 [ 58.991048][ T50] imon:imon_probe: failed to initialize context! [ 58.991054][ T50] imon 5-1:0.0: unable to register, err -19 [ 58.992471][ T50] usb 5-1: USB disconnect, device number 5 [ 59.115463][ T851] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 59.178607][ T851] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 59.178625][ T851] em28xx 6-1:0.0: board has no eeprom [ 59.236406][ T851] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 59.236423][ T851] em28xx 6-1:0.0: dvb set to bulk mode. [ 59.237107][ T979] em28xx 6-1:0.0: Binding DVB extension [ 59.240757][ T851] usb 6-1: USB disconnect, device number 4 [ 59.241457][ T851] em28xx 6-1:0.0: Disconnecting em28xx [ 59.258161][ T979] em28xx 6-1:0.0: Registering input extension [ 59.258440][ T851] em28xx 6-1:0.0: Closing input extension [ 59.266661][ T851] em28xx: Freeing device [ 59.404477][ T50] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 59.516975][ T6392] batadv_slave_0: Caught tx_queue_len zero misconfig [ 59.516992][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 59.555203][ T50] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 59.556480][ T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 59.556502][ T50] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 59.556521][ T50] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.558683][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.558695][ T50] usb 5-1: Product: syz [ 59.558702][ T50] usb 5-1: Manufacturer: syz [ 59.558709][ T50] usb 5-1: SerialNumber: syz [ 59.559983][ T50] usb 5-1: config 0 descriptor?? [ 59.563928][ T6360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.624131][ T6402] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.113'. [ 59.768691][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 59.772870][ T50] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input9 [ 60.014419][ T5517] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 60.024411][ T50] rc_core: IR keymap rc-imon-pad not found [ 60.024421][ T50] Registered IR keymap rc-empty [ 60.024454][ T50] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 60.024463][ T50] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 60.164899][ T5517] usb 8-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 60.165318][ T5517] usb 8-1: config 0 has no interfaces? [ 60.165334][ T5517] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.166743][ T5517] usb 8-1: config 0 descriptor?? [ 60.196294][ T50] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 60.197573][ T50] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 60.200390][ T50] imon 5-1:0.0: iMON device (15c2:0045, intf0) on usb<5:6> initialized [ 60.414788][ T6423] capability: warning: `syz.2.119' uses 32-bit capabilities (legacy support in use) [ 60.420187][ T6423] program syz.2.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.631071][ T851] usb 5-1: USB disconnect, device number 6 [ 60.714529][ T50] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 60.865294][ T50] usb 7-1: not running at top speed; connect to a high speed hub [ 60.865313][ T50] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 60.866062][ T50] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.866123][ T50] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 60.866135][ T50] usb 7-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 60.866153][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.873547][ T50] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 60.881490][ T50] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 60.882780][ T50] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 60.882825][ T50] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 60.885379][ T50] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 61.090246][ T6426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.197446][ T6426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.248775][ T6426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.250375][ T6441] netlink: 72 bytes leftover after parsing attributes in process `syz.0.125'. [ 61.316286][ T50] usb 7-1: USB disconnect, device number 4 [ 61.329655][ T50] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 61.335438][ T50] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 61.336181][ T50] keyspan 7-1:1.0: device disconnected [ 61.676071][ T6444] netlink: 48 bytes leftover after parsing attributes in process `syz.1.126'. [ 61.849412][ T6449] netlink: 'syz.2.128': attribute type 10 has an invalid length. [ 61.943008][ T6451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.129'. [ 61.948539][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 61.948550][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.129'. [ 62.053835][ T6457] veth0_macvtap: Caught tx_queue_len zero misconfig [ 62.150370][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 62.542098][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 62.542110][ T42] audit: type=1400 audit(1791673515.854:474): avc: denied { name_bind } for pid=6464 comm="syz.0.134" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.544799][ T42] audit: type=1400 audit(1791673515.864:475): avc: denied { ioctl } for pid=6464 comm="syz.0.134" path="socket:[10231]" dev="sockfs" ino=10231 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.553287][ T42] audit: type=1400 audit(1791673515.864:476): avc: denied { write } for pid=6464 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 62.553948][ T42] audit: type=1400 audit(1791673515.864:477): avc: denied { read } for pid=6464 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 62.591028][ T6469] netlink: 'syz.1.136': attribute type 4 has an invalid length. [ 62.594778][ T42] audit: type=1400 audit(1791673515.904:478): avc: denied { node_bind } for pid=6468 comm="syz.1.136" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 62.687951][ T6474] netlink: 36 bytes leftover after parsing attributes in process `syz.1.138'. [ 62.699473][ T42] audit: type=1400 audit(1791673516.014:479): avc: denied { append } for pid=6475 comm="syz.2.139" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 62.700871][ T42] audit: type=1400 audit(1791673516.014:480): avc: denied { read } for pid=6475 comm="syz.2.139" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.701274][ T42] audit: type=1400 audit(1791673516.014:481): avc: denied { open } for pid=6475 comm="syz.2.139" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 62.713339][ T62] usb 8-1: USB disconnect, device number 6 [ 62.786537][ T42] audit: type=1400 audit(1791673516.104:482): avc: denied { create } for pid=6480 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.789579][ T42] audit: type=1400 audit(1791673516.104:483): avc: denied { connect } for pid=6480 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.854210][ T6484] bridge_slave_0: left allmulticast mode [ 62.854233][ T6484] bridge_slave_0: left promiscuous mode [ 62.854491][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.860134][ T6484] bridge_slave_1: left allmulticast mode [ 62.860152][ T6484] bridge_slave_1: left promiscuous mode [ 62.860313][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.868885][ T6484] bond0: (slave bond_slave_1): Releasing backup interface [ 62.879407][ T6484] team0: Port device team_slave_0 removed [ 62.884122][ T6484] team0: Port device team_slave_1 removed [ 62.886969][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.886986][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.890461][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.890476][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.893042][ T6484] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.917820][ T6485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.932003][ T6490] 9pnet_virtio: no channels available for device syz [ 62.932266][ T6490] 9pnet_virtio: no channels available for device syz [ 62.932524][ T6490] 9pnet_virtio: no channels available for device syz [ 62.932830][ T6490] 9pnet_virtio: no channels available for device syz [ 62.933084][ T6490] 9pnet_virtio: no channels available for device syz [ 62.933404][ T6490] 9pnet_virtio: no channels available for device syz [ 62.933646][ T6490] 9pnet_virtio: no channels available for device syz [ 62.933886][ T6490] 9pnet_virtio: no channels available for device syz [ 62.934131][ T6490] 9pnet_virtio: no channels available for device syz [ 62.945473][ T6485] team0: Mode changed to "broadcast" [ 62.945477][ T6490] 9pnet_virtio: no channels available for device syz [ 62.945670][ T6490] 9pnet_virtio: no channels available for device syz [ 62.945889][ T6490] 9pnet_virtio: no channels available for device syz [ 62.946135][ T6490] 9pnet_virtio: no channels available for device syz [ 62.946272][ T6490] 9pnet_virtio: no channels available for device syz [ 62.946401][ T6490] 9pnet_virtio: no channels available for device syz [ 62.946604][ T6490] 9pnet_virtio: no channels available for device syz [ 62.946741][ T6490] 9pnet_virtio: no channels available for device syz [ 62.946921][ T6490] 9pnet_virtio: no channels available for device syz [ 62.947111][ T6490] 9pnet_virtio: no channels available for device syz [ 62.947241][ T6490] 9pnet_virtio: no channels available for device syz [ 62.948041][ T6490] 9pnet_virtio: no channels available for device syz [ 62.948196][ T6490] 9pnet_virtio: no channels available for device syz [ 62.948327][ T6490] 9pnet_virtio: no channels available for device syz [ 62.948453][ T6490] 9pnet_virtio: no channels available for device syz [ 62.948586][ T6490] 9pnet_virtio: no channels available for device syz [ 62.948767][ T6490] 9pnet_virtio: no channels available for device syz [ 62.948895][ T6490] 9pnet_virtio: no channels available for device syz [ 62.948968][ T6485] tipc: Started in network mode [ 62.948980][ T6485] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 62.949091][ T6485] tipc: Enabled bearer , priority 0 [ 62.949305][ T6490] 9pnet_virtio: no channels available for device syz [ 62.949436][ T6490] 9pnet_virtio: no channels available for device syz [ 62.949562][ T6490] 9pnet_virtio: no channels available for device syz [ 62.949695][ T6490] 9pnet_virtio: no channels available for device syz [ 62.949826][ T6490] 9pnet_virtio: no channels available for device syz [ 63.026678][ T2405] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 63.146316][ T6496] netlink: 'syz.3.144': attribute type 30 has an invalid length. [ 63.160789][ T6496] bond1: option arp_missed_max: invalid value (0) [ 63.160808][ T6496] bond1: option arp_missed_max: allowed values 1 - 255 [ 63.162128][ T6496] bond1 (unregistering): Released all slaves [ 63.194523][ T2405] usb 7-1: Using ep0 maxpacket: 8 [ 63.195232][ T2405] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 63.196341][ T2405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 63.196411][ T2405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.202933][ T2405] usb 7-1: config 0 descriptor?? [ 63.408326][ T2405] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 63.429296][ T6502] macvlan2: entered promiscuous mode [ 63.429318][ T6502] bridge0: entered promiscuous mode [ 63.459462][ T6502] typec_fusb302 0-0002: supply vbus not found, using dummy regulator [ 63.469181][ T6502] typec_fusb302 0-0002: failed to request gpio_int_n [ 63.488075][ T6502] typec_fusb302 0-0002: probe with driver typec_fusb302 failed with error -2 [ 63.489315][ T6502] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x02 [ 63.528010][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'. [ 63.532012][ T6506] geneve2: entered promiscuous mode [ 63.532031][ T6506] geneve2: entered allmulticast mode [ 63.535414][ T6506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6506 comm=syz.0.147 [ 63.556694][ T50] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 63.609499][ T6476] veth0_vlan: entered allmulticast mode [ 63.650273][ T6476] veth0_vlan (unregistering): left allmulticast mode [ 63.666046][ T6513] FAULT_INJECTION: forcing a failure. [ 63.666046][ T6513] name fail_futex, interval 1, probability 0, space 0, times 1 [ 63.666074][ T6513] CPU: 2 UID: 0 PID: 6513 Comm: syz.1.148 Not tainted syzkaller #0 PREEMPT(full) [ 63.666094][ T6513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.666105][ T6513] Call Trace: [ 63.666111][ T6513] [ 63.666119][ T6513] dump_stack_lvl+0x100/0x190 [ 63.666158][ T6513] should_fail_ex.cold+0x5/0xa [ 63.666200][ T6513] get_futex_key+0x1d0/0x14f0 [ 63.666230][ T6513] ? __pfx_get_futex_key+0x10/0x10 [ 63.666266][ T6513] futex_wake+0xf4/0x5e0 [ 63.666289][ T6513] ? __pfx_futex_wake+0x10/0x10 [ 63.666319][ T6513] do_futex+0x2b2/0x440 [ 63.666347][ T6513] ? __pfx_do_futex+0x10/0x10 [ 63.666375][ T6513] ? find_held_lock+0x2b/0x80 [ 63.666404][ T6513] ? setid_policy_lookup+0x10c/0x350 [ 63.666433][ T6513] __x64_sys_futex+0x34f/0x4d0 [ 63.666464][ T6513] ? __pfx___x64_sys_futex+0x10/0x10 [ 63.666501][ T6513] do_syscall_64+0x123/0x790 [ 63.666531][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.666551][ T6513] RIP: 0033:0x7f164db9e1d9 [ 63.666566][ T6513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.666583][ T6513] RSP: 002b:00007f164eaff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 63.666601][ T6513] RAX: ffffffffffffffda RBX: 00007f164de25fa8 RCX: 00007f164db9e1d9 [ 63.666613][ T6513] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f164de25fac [ 63.666624][ T6513] RBP: 00007f164de25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 63.666634][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.666650][ T6513] R13: 00007f164de26038 R14: 00007ffc21ee4be0 R15: 00007ffc21ee4cc8 [ 63.666675][ T6513] [ 63.731079][ T50] usb 8-1: unable to get BOS descriptor or descriptor too short [ 63.731173][ T50] usb 8-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 63.732711][ T50] usb 8-1: config 142 has an invalid interface number: 251 but max is 0 [ 63.732727][ T50] usb 8-1: config 142 has no interface number 0 [ 63.732790][ T50] usb 8-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 63.732807][ T50] usb 8-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 63.732821][ T50] usb 8-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 63.732840][ T50] usb 8-1: config 142 interface 251 has no altsetting 0 [ 63.739481][ T50] usb 8-1: string descriptor 0 read error: -22 [ 63.740616][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.744352][ T6500] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.745916][ T6500] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.747470][ T50] cypress_m8 8-1:142.251: HID->COM RS232 Adapter converter detected [ 63.755101][ T50] usb 8-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 63.802549][ T62] usb 7-1: USB disconnect, device number 5 [ 63.965853][ T50] tipc: Node number set to 11578026 [ 64.013525][ T50] usb 8-1: USB disconnect, device number 7 [ 64.019365][ T6500] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 64.022192][ T50] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 64.022606][ T50] cypress_m8 8-1:142.251: device disconnected [ 64.494023][ T6533] overlayfs: overlapping lowerdir path [ 64.620559][ T6543] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 64.621938][ T6545] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 64.676380][ T6551] binder: 6549:6551 ioctl c0306201 200000000340 returned -14 [ 64.685356][ T6552] can0: slcan on ttyS3. [ 64.814061][ T5735] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 64.934453][ T50] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 65.084430][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 65.085189][ T50] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 65.086094][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.086111][ T50] usb 7-1: config 0 has no interfaces? [ 65.087888][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.087906][ T50] usb 7-1: Product: syz [ 65.087917][ T50] usb 7-1: Manufacturer: syz [ 65.087929][ T50] usb 7-1: SerialNumber: syz [ 65.090360][ T50] usb 7-1: config 0 descriptor?? [ 65.367917][ T6552] can0 (unregistered): slcan off ttyS3. [ 65.373965][ T6585] ima: policy update failed [ 65.783079][ T6603] netlink: 'syz.1.167': attribute type 12 has an invalid length. [ 65.783092][ T6603] netlink: 'syz.1.167': attribute type 5 has an invalid length. [ 65.783098][ T6603] netlink: 'syz.1.167': attribute type 2 has an invalid length. [ 65.783106][ T6603] __nla_validate_parse: 2 callbacks suppressed [ 65.783111][ T6603] netlink: 212 bytes leftover after parsing attributes in process `syz.1.167'. [ 65.784024][ T6603] FAULT_INJECTION: forcing a failure. [ 65.784024][ T6603] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 65.784042][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.1.167 Not tainted syzkaller #0 PREEMPT(full) [ 65.784054][ T6603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.784061][ T6603] Call Trace: [ 65.784065][ T6603] [ 65.784069][ T6603] dump_stack_lvl+0x100/0x190 [ 65.784090][ T6603] should_fail_ex.cold+0x5/0xa [ 65.784103][ T6603] ? prepare_alloc_pages+0x16d/0x5b0 [ 65.784122][ T6603] should_fail_alloc_page+0xeb/0x140 [ 65.784139][ T6603] prepare_alloc_pages+0x1f0/0x5b0 [ 65.784158][ T6603] ? is_bpf_text_address+0x94/0x1a0 [ 65.784175][ T6603] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 65.784195][ T6603] ? stack_trace_save+0x8e/0xc0 [ 65.784206][ T6603] ? __pfx_stack_trace_save+0x10/0x10 [ 65.784217][ T6603] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 65.784229][ T6603] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 65.784241][ T6603] ? is_bpf_text_address+0x94/0x1a0 [ 65.784259][ T6603] ? kasan_save_stack+0x3f/0x50 [ 65.784273][ T6603] ? kasan_save_stack+0x30/0x50 [ 65.784286][ T6603] ? kasan_save_track+0x14/0x30 [ 65.784300][ T6603] ? __kasan_slab_alloc+0x89/0x90 [ 65.784314][ T6603] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 65.784328][ T6603] ? alloc_vmap_area+0x1814/0x2bb0 [ 65.784360][ T6603] ? __get_vm_area_node+0x1ed/0x350 [ 65.784376][ T6603] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 65.784394][ T6603] ? __vmalloc_node_noprof+0xad/0xf0 [ 65.784410][ T6603] ? __vmalloc_noprof+0xa3/0x120 [ 65.784426][ T6603] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 65.784441][ T6603] ? bpf_prog_alloc+0x3b/0x200 [ 65.784456][ T6603] ? bpf_prog_load+0x49e/0x2ab0 [ 65.784471][ T6603] ? __sys_bpf+0x1f46/0x4a30 [ 65.784483][ T6603] ? __x64_sys_bpf+0xce/0x140 [ 65.784495][ T6603] ? do_syscall_64+0x123/0x790 [ 65.784510][ T6603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.784527][ T6603] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.784542][ T6603] ? policy_nodemask+0xed/0x4f0 [ 65.784559][ T6603] alloc_pages_mpol+0x201/0x550 [ 65.784576][ T6603] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 65.784620][ T6603] alloc_pages_noprof+0x1a/0x160 [ 65.784633][ T6603] get_free_pages_noprof+0x10/0xb0 [ 65.784653][ T6603] __kasan_populate_vmalloc+0xa0/0x210 [ 65.784672][ T6603] alloc_vmap_area+0x95d/0x2bb0 [ 65.784692][ T6603] ? kasan_save_track+0x14/0x30 [ 65.784707][ T6603] ? __kasan_kmalloc+0xaa/0xb0 [ 65.784723][ T6603] ? __pfx_alloc_vmap_area+0x10/0x10 [ 65.784738][ T6603] ? __pfx_stack_trace_save+0x10/0x10 [ 65.784750][ T6603] ? __get_vm_area_node+0x124/0x350 [ 65.784768][ T6603] __get_vm_area_node+0x1ed/0x350 [ 65.784788][ T6603] __vmalloc_node_range_noprof+0x268/0x1420 [ 65.784812][ T6603] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 65.784837][ T6603] ? do_raw_spin_lock+0x128/0x260 [ 65.784866][ T6603] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 65.784889][ T6603] ? lock_acquire+0x1d1/0x380 [ 65.784912][ T6603] ? find_held_lock+0x2b/0x80 [ 65.784938][ T6603] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 65.784955][ T6603] ? avc_has_perm_noaudit+0x11e/0x470 [ 65.784970][ T6603] ? avc_has_perm_noaudit+0x145/0x470 [ 65.784982][ T6603] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 65.784997][ T6603] __vmalloc_node_noprof+0xad/0xf0 [ 65.785013][ T6603] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 65.785029][ T6603] __vmalloc_noprof+0xa3/0x120 [ 65.785046][ T6603] ? __pfx___vmalloc_noprof+0x10/0x10 [ 65.785063][ T6603] ? rcu_is_watching+0x13/0xc0 [ 65.785079][ T6603] ? cap_capable+0x107/0x430 [ 65.785094][ T6603] bpf_prog_alloc_no_stats+0x59/0x690 [ 65.785109][ T6603] ? security_capable+0x80/0x260 [ 65.785123][ T6603] bpf_prog_alloc+0x3b/0x200 [ 65.785137][ T6603] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.785154][ T6603] bpf_prog_load+0x49e/0x2ab0 [ 65.785174][ T6603] ? __pfx_bpf_prog_load+0x10/0x10 [ 65.785201][ T6603] __sys_bpf+0x1f46/0x4a30 [ 65.785216][ T6603] ? __pfx___sys_bpf+0x10/0x10 [ 65.785227][ T6603] ? find_held_lock+0x2b/0x80 [ 65.785242][ T6603] ? futex_wake+0x4ea/0x5e0 [ 65.785263][ T6603] ? rcu_read_lock_any_held+0x6a/0x90 [ 65.785273][ T6603] ? find_held_lock+0x2b/0x80 [ 65.785288][ T6603] ? ksys_write+0x190/0x250 [ 65.785302][ T6603] ? ksys_write+0x190/0x250 [ 65.785323][ T6603] ? __x64_sys_futex+0x34f/0x4d0 [ 65.785338][ T6603] ? __x64_sys_futex+0x358/0x4d0 [ 65.785355][ T6603] ? xfd_validate_state+0x129/0x190 [ 65.785370][ T6603] ? __x64_sys_bpf+0xce/0x140 [ 65.785381][ T6603] __x64_sys_bpf+0xce/0x140 [ 65.785394][ T6603] ? do_syscall_64+0xae/0x790 [ 65.785410][ T6603] do_syscall_64+0x123/0x790 [ 65.785427][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.785438][ T6603] RIP: 0033:0x7f164db9e1d9 [ 65.785448][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.785459][ T6603] RSP: 002b:00007f164eaff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.785470][ T6603] RAX: ffffffffffffffda RBX: 00007f164de25fa0 RCX: 00007f164db9e1d9 [ 65.785477][ T6603] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 65.785484][ T6603] RBP: 00007f164dc35888 R08: 0000000000000000 R09: 0000000000000000 [ 65.785491][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.785497][ T6603] R13: 00007f164de26038 R14: 00007f164de25fa0 R15: 00007ffc21ee4cc8 [ 65.785511][ T6603] [ 65.786822][ T6603] syz.1.167: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 65.786989][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.1.167 Not tainted syzkaller #0 PREEMPT(full) [ 65.787004][ T6603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.787010][ T6603] Call Trace: [ 65.787015][ T6603] [ 65.787020][ T6603] dump_stack_lvl+0x100/0x190 [ 65.787040][ T6603] warn_alloc.cold+0x9e/0xb2 [ 65.787073][ T6603] ? __pfx_warn_alloc+0x10/0x10 [ 65.787091][ T6603] ? lockdep_hardirqs_on+0x7d/0x110 [ 65.787117][ T6603] ? __get_vm_area_node+0x2f0/0x350 [ 65.787147][ T6603] ? __get_vm_area_node+0x22b/0x350 [ 65.787178][ T6603] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 65.787212][ T6603] ? do_raw_spin_lock+0x128/0x260 [ 65.787239][ T6603] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 65.787262][ T6603] ? lock_acquire+0x1d1/0x380 [ 65.787283][ T6603] ? find_held_lock+0x2b/0x80 [ 65.787311][ T6603] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 65.787336][ T6603] ? avc_has_perm_noaudit+0x11e/0x470 [ 65.787360][ T6603] ? avc_has_perm_noaudit+0x145/0x470 [ 65.787379][ T6603] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 65.787401][ T6603] __vmalloc_node_noprof+0xad/0xf0 [ 65.787426][ T6603] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 65.787443][ T6603] __vmalloc_noprof+0xa3/0x120 [ 65.787459][ T6603] ? __pfx___vmalloc_noprof+0x10/0x10 [ 65.787477][ T6603] ? rcu_is_watching+0x13/0xc0 [ 65.787493][ T6603] ? cap_capable+0x107/0x430 [ 65.787506][ T6603] bpf_prog_alloc_no_stats+0x59/0x690 [ 65.787520][ T6603] ? security_capable+0x80/0x260 [ 65.787534][ T6603] bpf_prog_alloc+0x3b/0x200 [ 65.787548][ T6603] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.787562][ T6603] bpf_prog_load+0x49e/0x2ab0 [ 65.787581][ T6603] ? __pfx_bpf_prog_load+0x10/0x10 [ 65.787609][ T6603] __sys_bpf+0x1f46/0x4a30 [ 65.787625][ T6603] ? __pfx___sys_bpf+0x10/0x10 [ 65.787635][ T6603] ? find_held_lock+0x2b/0x80 [ 65.787657][ T6603] ? futex_wake+0x4ea/0x5e0 [ 65.787680][ T6603] ? rcu_read_lock_any_held+0x6a/0x90 [ 65.787691][ T6603] ? find_held_lock+0x2b/0x80 [ 65.787707][ T6603] ? ksys_write+0x190/0x250 [ 65.787721][ T6603] ? ksys_write+0x190/0x250 [ 65.787744][ T6603] ? __x64_sys_futex+0x34f/0x4d0 [ 65.787760][ T6603] ? __x64_sys_futex+0x358/0x4d0 [ 65.787779][ T6603] ? xfd_validate_state+0x129/0x190 [ 65.787794][ T6603] ? __x64_sys_bpf+0xce/0x140 [ 65.787805][ T6603] __x64_sys_bpf+0xce/0x140 [ 65.787817][ T6603] ? do_syscall_64+0xae/0x790 [ 65.787834][ T6603] do_syscall_64+0x123/0x790 [ 65.787850][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.787861][ T6603] RIP: 0033:0x7f164db9e1d9 [ 65.787870][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.787880][ T6603] RSP: 002b:00007f164eaff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.787891][ T6603] RAX: ffffffffffffffda RBX: 00007f164de25fa0 RCX: 00007f164db9e1d9 [ 65.787898][ T6603] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 65.787904][ T6603] RBP: 00007f164dc35888 R08: 0000000000000000 R09: 0000000000000000 [ 65.787910][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.787916][ T6603] R13: 00007f164de26038 R14: 00007f164de25fa0 R15: 00007ffc21ee4cc8 [ 65.787931][ T6603] [ 65.789003][ T6603] Mem-Info: [ 65.789011][ T6603] active_anon:8913 inactive_anon:82 isolated_anon:0 [ 65.789011][ T6603] active_file:51 inactive_file:56024 isolated_file:0 [ 65.789011][ T6603] unevictable:1000 dirty:1922 writeback:0 [ 65.789011][ T6603] slab_reclaimable:11817 slab_unreclaimable:64292 [ 65.789011][ T6603] mapped:25096 shmem:1554 pagetables:1278 [ 65.789011][ T6603] sec_pagetables:292 bounce:0 [ 65.789011][ T6603] kernel_misc_reclaimable:0 [ 65.789011][ T6603] free:433236 free_pcp:6335 free_cma:0 [ 65.789041][ T6603] Node 0 active_anon:35652kB inactive_anon:328kB active_file:204kB inactive_file:223892kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:100384kB dirty:7684kB writeback:0kB shmem:4216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13216kB pagetables:4896kB sec_pagetables:1168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 65.789071][ T6603] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 65.789101][ T6603] Node 0 DMA free:14432kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:456kB local_pcp:104kB free_cma:0kB [ 65.789134][ T6603] lowmem_reserve[]: 0 1204 1204 1204 1204 [ 65.789156][ T6603] Node 0 DMA32 free:68264kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35648kB inactive_anon:328kB active_file:204kB inactive_file:223892kB unevictable:2000kB writepending:7684kB zspages:0kB present:2080628kB managed:1233668kB mlocked:0kB bounce:0kB free_pcp:19312kB local_pcp:10924kB free_cma:0kB [ 65.789187][ T6603] lowmem_reserve[]: 0 0 0 0 0 [ 65.789205][ T6603] Node 1 Normal free:1650248kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:2000kB writepending:4kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:5548kB local_pcp:2560kB free_cma:0kB [ 65.789235][ T6603] lowmem_reserve[]: 0 0 0 0 0 [ 65.789253][ T6603] Node 0 DMA: 4*4kB (M) 8*8kB (UME) 5*16kB (ME) 4*32kB (UME) 7*64kB (UME) 7*128kB (UME) 4*256kB (UME) 5*512kB (ME) 3*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 14432kB [ 65.789337][ T6603] Node 0 DMA32: 0*4kB 513*8kB (UM) 264*16kB (UM) 298*32kB (UM) 70*64kB (UME) 30*128kB (UME) 12*256kB (UM) 8*512kB (UME) 10*1024kB (UME) 8*2048kB (UME) 2*4096kB (U) = 68168kB [ 65.789439][ T6603] Node 1 Normal: 8*4kB (UM) 11*8kB (UM) 7*16kB (UM) 7*32kB (UM) 6*64kB (UM) 2*128kB (U) 0*256kB 3*512kB (M) 1*1024kB (U) 2*2048kB (UM) 401*4096kB (UM) = 1650248kB [ 65.789564][ T6603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 65.789573][ T6603] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 65.789581][ T6603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 65.789590][ T6603] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 65.789598][ T6603] 57625 total pagecache pages [ 65.789602][ T6603] 0 pages in swap cache [ 65.789605][ T6603] Free swap = 124996kB [ 65.789609][ T6603] Total swap = 124996kB [ 65.789613][ T6603] 1048443 pages RAM [ 65.789616][ T6603] 0 pages HighMem/MovableOnly [ 65.789620][ T6603] 290716 pages reserved [ 65.789623][ T6603] 0 pages cma reserved [ 65.877398][ T5805] usb 7-1: USB disconnect, device number 6 [ 65.931401][ T6616] binder_alloc: 6615: pid 6615 spamming oneway? 1 buffers allocated for a total size of 4096 [ 66.075992][ T6626] lo: Caught tx_queue_len zero misconfig [ 66.076011][ T6626] netlink: 'syz.2.173': attribute type 14 has an invalid length. [ 66.077274][ T6625] netlink: 'syz.2.173': attribute type 14 has an invalid length. [ 66.167525][ T6632] jffs2: notice: (6632) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 66.212181][ T6636] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 66.308260][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 66.339576][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339598][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339610][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339621][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339632][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339644][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339655][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339666][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339678][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339689][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339701][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339712][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339723][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339735][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339746][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339757][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339769][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339780][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339791][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339803][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339814][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339825][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339837][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339848][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339859][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339871][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339882][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339893][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339905][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339916][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339927][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339939][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.339950][ T6642] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 66.342149][ T43] IPVS: starting estimator thread 0... [ 66.434453][ T6646] IPVS: using max 43 ests per chain, 103200 per kthread [ 66.462317][ T6663] ip6t_hbh: Not strict - not implemented [ 66.462858][ T6661] netlink: 'syz.2.182': attribute type 1 has an invalid length. [ 66.520673][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 66.520696][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 66.520885][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 66.520899][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 66.818193][ T6696] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.818208][ T6696] overlayfs: failed to set xattr on upper [ 66.818212][ T6696] overlayfs: ...falling back to redirect_dir=nofollow. [ 66.818215][ T6696] overlayfs: ...falling back to index=off. [ 66.818219][ T6696] overlayfs: ...falling back to uuid=null. [ 66.818226][ T6696] overlayfs: maximum fs stacking depth exceeded [ 66.818716][ T6695] syz.1.193 uses obsolete (PF_INET,SOCK_PACKET) [ 66.956482][ T6705] --map-set only usable from mangle table [ 67.009123][ T6703] trusted_key: encrypted_key: insufficient parameters specified [ 67.091102][ T6713] macsec1: entered promiscuous mode [ 67.091116][ T6713] macsec1: entered allmulticast mode [ 67.223260][ T6729] iommufd_mock iommufd_mock0: Adding to iommu group 3 [ 67.446034][ T6744] FAULT_INJECTION: forcing a failure. [ 67.446034][ T6744] name failslab, interval 1, probability 0, space 0, times 0 [ 67.446063][ T6744] CPU: 1 UID: 0 PID: 6744 Comm: syz.0.208 Not tainted syzkaller #0 PREEMPT(full) [ 67.446083][ T6744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.446092][ T6744] Call Trace: [ 67.446103][ T6744] [ 67.446109][ T6744] dump_stack_lvl+0x100/0x190 [ 67.446151][ T6744] should_fail_ex.cold+0x5/0xa [ 67.446178][ T6744] should_failslab+0xc2/0x120 [ 67.446212][ T6744] __kmalloc_cache_noprof+0x91/0x6d0 [ 67.446249][ T6744] ? get_mm_exe_file+0x8a/0x1a0 [ 67.446272][ T6744] ? get_current_details+0xa0/0x670 [ 67.446301][ T6744] get_current_details+0xa0/0x670 [ 67.446330][ T6744] landlock_merge_ruleset+0x7ea/0xd10 [ 67.446358][ T6744] __do_sys_landlock_restrict_self+0x264/0x10a0 [ 67.446396][ T6744] do_syscall_64+0x123/0x790 [ 67.446432][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.446452][ T6744] RIP: 0033:0x7f077bd9e1d9 [ 67.446468][ T6744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.446486][ T6744] RSP: 002b:00007f0779ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 67.446512][ T6744] RAX: ffffffffffffffda RBX: 00007f077c025fa0 RCX: 00007f077bd9e1d9 [ 67.446525][ T6744] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000003 [ 67.446538][ T6744] RBP: 00007f077be35888 R08: 0000000000000000 R09: 0000000000000000 [ 67.446551][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.446562][ T6744] R13: 00007f077c026038 R14: 00007f077c025fa0 R15: 00007fff4de33438 [ 67.446589][ T6744] [ 67.523760][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 67.523774][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'. [ 67.661343][ T42] kauditd_printk_skb: 151 callbacks suppressed [ 67.662190][ T42] audit: type=1400 audit(1791673520.974:635): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.672704][ T42] audit: type=1400 audit(1791673520.984:636): avc: denied { read } for pid=5726 comm="syz-executor" name="loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.672961][ T42] audit: type=1400 audit(1791673520.984:637): avc: denied { open } for pid=5726 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.673205][ T42] audit: type=1400 audit(1791673520.984:638): avc: denied { ioctl } for pid=5726 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.744093][ T42] audit: type=1400 audit(1791673521.054:639): avc: denied { ioctl } for pid=6752 comm="syz.2.211" path="socket:[12100]" dev="sockfs" ino=12100 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.822975][ T6757] batadv_slave_1: Caught tx_queue_len zero misconfig [ 67.882109][ T42] audit: type=1400 audit(1791673521.194:640): avc: denied { read } for pid=6761 comm="syz.2.213" dev="nsfs" ino=4026532974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.882345][ T42] audit: type=1400 audit(1791673521.194:641): avc: denied { open } for pid=6761 comm="syz.2.213" path="net:[4026532974]" dev="nsfs" ino=4026532974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.889618][ T42] audit: type=1400 audit(1791673521.204:642): avc: denied { unlink } for pid=6761 comm="syz.2.213" name="#10" dev="tmpfs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.891727][ T42] audit: type=1400 audit(1791673521.204:643): avc: denied { mount } for pid=6761 comm="syz.2.213" name="/" dev="overlay" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.968551][ T42] audit: type=1400 audit(1791673521.284:644): avc: denied { read write } for pid=6763 comm="syz.1.214" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.969910][ T6764] program syz.1.214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.137656][ T6776] tmpfs: Unknown parameter 'dont_measure' [ 68.429370][ T6791] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 68.484916][ T6798] input: syz0 as /devices/virtual/input/input11 [ 68.510287][ T6801] program syz.2.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.570174][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 68.707814][ T61] cfg80211: failed to load regulatory.db [ 68.841907][ T6843] ip_tables: iptables: counters copy to user failed while replacing table [ 68.883882][ T6846] program syz.2.232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.264507][ T6511] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 69.611119][ T61] wacom 0003:056A:003F.0003: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 69.640103][ T6511] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 69.640830][ T6511] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 69.640846][ T6511] usb 8-1: can't read configurations, error -71 [ 69.660675][ T6874] fido_id[6874]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.840853][ T6896] FAULT_INJECTION: forcing a failure. [ 69.840853][ T6896] name failslab, interval 1, probability 0, space 0, times 0 [ 69.840873][ T6896] CPU: 0 UID: 0 PID: 6896 Comm: syz.1.244 Not tainted syzkaller #0 PREEMPT(full) [ 69.840886][ T6896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.840893][ T6896] Call Trace: [ 69.840897][ T6896] [ 69.840901][ T6896] dump_stack_lvl+0x100/0x190 [ 69.840921][ T6896] should_fail_ex.cold+0x5/0xa [ 69.840937][ T6896] should_failslab+0xc2/0x120 [ 69.840955][ T6896] kmem_cache_alloc_noprof+0x92/0x6a0 [ 69.840969][ T6896] ? sk_prot_alloc+0x60/0x2a0 [ 69.840993][ T6896] sk_prot_alloc+0x60/0x2a0 [ 69.841007][ T6896] sk_alloc+0x36/0xe80 [ 69.841026][ T6896] inet6_create+0x385/0x12b0 [ 69.841044][ T6896] ? inet6_create+0x7f/0x12b0 [ 69.841063][ T6896] __sock_create+0x339/0x860 [ 69.841079][ T6896] __sys_socket+0x14d/0x260 [ 69.841094][ T6896] ? __pfx___sys_socket+0x10/0x10 [ 69.841113][ T6896] __x64_sys_socket+0x72/0xb0 [ 69.841128][ T6896] ? lockdep_hardirqs_on+0x7d/0x110 [ 69.841144][ T6896] do_syscall_64+0x123/0x790 [ 69.841161][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.841173][ T6896] RIP: 0033:0x7f164db9e1d9 [ 69.841182][ T6896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.841193][ T6896] RSP: 002b:00007f164eabd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 69.841204][ T6896] RAX: ffffffffffffffda RBX: 00007f164de26180 RCX: 00007f164db9e1d9 [ 69.841211][ T6896] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 69.841217][ T6896] RBP: 00007f164dc35888 R08: 0000000000000000 R09: 0000000000000000 [ 69.841224][ T6896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.841230][ T6896] R13: 00007f164de26218 R14: 00007f164de26180 R15: 00007ffc21ee4cc8 [ 69.841244][ T6896] [ 70.511124][ T6930] program syz.3.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.581255][ T6934] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 70.581291][ T6934] netlink: 232 bytes leftover after parsing attributes in process `syz.0.255'. [ 70.581322][ T6934] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 71.489013][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.489045][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.573350][ T6957] netlink: 44 bytes leftover after parsing attributes in process `syz.3.259'. [ 71.573388][ T6957] tipc: Enabling of bearer rejected, media not registered [ 71.575473][ T6957] vivid-000: ================= START STATUS ================= [ 71.575486][ T6957] vivid-000: Test Pattern: 75% Colorbar [ 71.575504][ T6957] vivid-000: Fill Percentage of Frame: 100 [ 71.575520][ T6957] vivid-000: Horizontal Movement: No Movement [ 71.575536][ T6957] vivid-000: Vertical Movement: No Movement [ 71.575547][ T6957] vivid-000: OSD Text Mode: All [ 71.575560][ T6957] vivid-000: Show Border: false [ 71.575575][ T6957] vivid-000: Show Square: false [ 71.575589][ T6957] vivid-000: Sensor Flipped Horizontally: false [ 71.575603][ T6957] vivid-000: Sensor Flipped Vertically: false [ 71.575618][ T6957] vivid-000: Insert SAV Code in Image: false [ 71.575633][ T6957] vivid-000: Insert EAV Code in Image: false [ 71.575647][ T6957] vivid-000: Insert Video Guard Band: false [ 71.575662][ T6957] vivid-000: Reduced Framerate: false [ 71.575671][ T6957] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 71.575686][ T6957] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 71.575702][ T6957] vivid-000: Enable Capture Cropping: true [ 71.575717][ T6957] vivid-000: Enable Capture Composing: true [ 71.575732][ T6957] vivid-000: Enable Capture Scaler: true [ 71.575747][ T6957] vivid-000: Timestamp Source: End of Frame [ 71.575761][ T6957] vivid-000: Colorspace: sRGB [ 71.575770][ T6957] vivid-000: Transfer Function: Default [ 71.575784][ T6957] vivid-000: Y'CbCr Encoding: Default [ 71.575798][ T6957] vivid-000: HSV Encoding: Hue 0-179 [ 71.575812][ T6957] vivid-000: Quantization: Default [ 71.575826][ T6957] vivid-000: Apply Alpha To Red Only: false [ 71.575841][ T6957] vivid-000: Standard Aspect Ratio: 4x3 [ 71.575865][ T6957] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 71.575882][ T6957] vivid-000: DV Timings: 640x480p59 inactive [ 71.575900][ T6957] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 71.575915][ T6957] vivid-000: Maximum EDID Blocks: 2 [ 71.575930][ T6957] vivid-000: Limited RGB Range (16-235): false [ 71.575945][ T6957] vivid-000: Rx RGB Quantization Range: Automatic [ 71.575960][ T6957] vivid-000: Power Present: 0x00000001 [ 71.575975][ T6957] tpg source WxH: 320x240 (Y'CbCr) [ 71.575985][ T6957] tpg field: 1 [ 71.575990][ T6957] tpg crop: (0,0)/320x240 [ 71.576000][ T6957] tpg compose: (0,0)/320x240 [ 71.576009][ T6957] tpg colorspace: 8 [ 71.576015][ T6957] tpg transfer function: 0/0 [ 71.576022][ T6957] tpg Y'CbCr encoding: 0/0 [ 71.576029][ T6957] tpg quantization: 0/0 [ 71.576037][ T6957] tpg RGB range: 0/2 [ 71.576043][ T6957] vivid-000: ================== END STATUS ================== [ 71.664848][ T6964] program syz.3.262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.826439][ T6972] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 71.826453][ T6972] CIFS: Attempting to mount //127.0.0.1/share [ 71.881195][ T6976] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 71.881293][ T6976] SELinux: failed to load policy [ 71.882771][ T6974] CIFS: VFS: \\127.0.0.1 SMB response too long (2464612352 bytes) [ 71.883742][ T6972] CIFS: VFS: cifs_mount failed w/return code = -112 [ 71.987566][ T6987] program syz.3.271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.734317][ T7014] program syz.2.280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.746347][ T42] kauditd_printk_skb: 263 callbacks suppressed [ 72.746356][ T42] audit: type=1400 audit(1791673526.044:908): avc: denied { read write } for pid=7013 comm="syz.2.280" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.746381][ T42] audit: type=1400 audit(1791673526.044:909): avc: denied { open } for pid=7013 comm="syz.2.280" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.894135][ T42] audit: type=1400 audit(1791673526.204:910): avc: denied { create } for pid=7015 comm="syz.2.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.904400][ T42] audit: type=1400 audit(1791673526.214:911): avc: denied { setopt } for pid=7015 comm="syz.2.281" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.923454][ T42] audit: type=1400 audit(1791673526.234:912): avc: denied { bind } for pid=7015 comm="syz.2.281" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.923611][ T42] audit: type=1400 audit(1791673526.234:913): avc: denied { name_bind } for pid=7015 comm="syz.2.281" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 72.923730][ T42] audit: type=1400 audit(1791673526.234:914): avc: denied { node_bind } for pid=7015 comm="syz.2.281" saddr=ff01::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 73.055681][ T42] audit: type=1400 audit(1791673526.374:915): avc: denied { ioctl } for pid=7041 comm="syz.0.285" path="socket:[16848]" dev="sockfs" ino=16848 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.093286][ T42] audit: type=1400 audit(1791673526.404:916): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 73.104656][ T42] audit: type=1400 audit(1791673526.424:917): avc: denied { create } for pid=7055 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.112626][ T70] IPVS: starting estimator thread 0... [ 73.129401][ T7061] program syz.3.289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.189664][ T7068] fuse: Unknown parameter 'grou00000000000000000000' [ 73.204441][ T7059] IPVS: using max 43 ests per chain, 103200 per kthread [ 73.207977][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 73.207992][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 73.213968][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 73.250455][ T7077] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 73.250645][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.250903][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.257424][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.257470][ T7077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.257625][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.257671][ T7077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.259742][ T7077] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 73.261469][ T7079] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 73.261481][ T7079] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 73.262535][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 73.307820][ T7082] comedi comedi4: bad chanlist[0]=0xfffff1a1 chan=61857 range length=2 [ 73.429242][ T7089] syzkaller1: entered promiscuous mode [ 73.429312][ T7089] syzkaller1: entered allmulticast mode [ 73.564503][ C3] net_ratelimit: 195 callbacks suppressed [ 73.628088][ T7093] program syz.1.300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.657051][ T7095] binder: 7094:7095 ioctl c018937a 2000000005c0 returned -22 [ 73.657295][ T7097] fuse: Unknown parameter 'grou00000000000000000000' [ 73.698074][ T7102] zero sized request [ 73.719057][ T7099] Console: switching to colour dummy device 80x25 [ 73.819615][ T7108] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 73.830855][ T7099] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 307 [ 73.830899][ T5805] nfc: nfc_urelease_event_work: portid 307 [ 73.832653][ T7099] ------------[ cut here ]------------ [ 73.832659][ T7099] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 73.832688][ T7104] MPTCP: sched=default [ 73.832663][ T7099] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#0: syz.2.303/7099 [ 73.836191][ T7104] MPTCP: subflow=ffff888039627c00 [ 73.836205][ T7104] MPTCP: subflow=ffff888039627c00, family=10 [ 73.836218][ T7104] MPTCP: subflow=ffff888039627c00 [ 73.836465][ T7104] MPTCP: msk=ffff888028498000 [ 73.837411][ T7103] MPTCP: msk=ffff888028498000 state=7 [ 73.837426][ T7103] MPTCP: msk=ffff888028498000 [ 73.837436][ T7103] MPTCP: msk=ffff888028498000 [ 73.837470][ T7103] MPTCP: msk=ffff888028498000 [ 73.837657][ T7104] kcov: kcov_task_exit: t = ffff888020e9cb00, kcov->t = ffff888020e9cb00 [ 73.837760][ T7111] kcov: kcov_task_exit: t = ffff88802c6aa580, kcov->t = ffff88802c6aa580 [ 73.844450][ T1161] ieee80211 phy5: mac80211_hwsim_config (freq=2452(2452 - 0)/noht idle=0 ps=0 smps=static) [ 73.844472][ T1161] ieee80211 phy5: mac80211_hwsim_link_info_changed(changed=0x200 vif->addr=08:02:11:00:00:00, link id 0) [ 73.844486][ T1161] ieee80211 phy5: BCN EN: 1 (BI=100) [ 73.854830][ T7113] kcov: kcov_start: t = ffff888037b02580, size = 524288, area = ffffc90007371000 [ 73.856659][ T7113] debugfs: creating file '7113-4' [ 73.856718][ T7113] debugfs: creating file 'remote_tlb_flush' [ 73.856772][ T7113] debugfs: creating file 'remote_tlb_flush_requests' [ 73.856832][ T7113] debugfs: creating file 'mmu_shadow_zapped' [ 73.856884][ T7113] debugfs: creating file 'mmu_pte_write' [ 73.856935][ T7113] debugfs: creating file 'mmu_pde_zapped' [ 73.856991][ T7113] debugfs: creating file 'mmu_flooded' [ 73.857038][ T7113] debugfs: creating file 'mmu_recycled' [ 73.857091][ T7113] debugfs: creating file 'mmu_cache_miss' [ 73.857146][ T7113] debugfs: creating file 'mmu_unsync' [ 73.857195][ T7113] debugfs: creating file 'mmu_shadow_pages' [ 73.857235][ T7113] debugfs: creating file 'pages_4k' [ 73.857272][ T7113] debugfs: creating file 'pages_2m' [ 73.857311][ T7113] debugfs: creating file 'pages_1g' [ 73.857358][ T7113] debugfs: creating file 'nx_lpage_splits' [ 73.857409][ T7113] debugfs: creating file 'max_mmu_rmap_size' [ 73.857461][ T7113] debugfs: creating file 'max_mmu_page_hash_collisions' [ 73.857551][ T7113] debugfs: creating file 'halt_successful_poll' [ 73.857603][ T7113] debugfs: creating file 'halt_attempted_poll' [ 73.857714][ T7113] debugfs: creating file 'halt_poll_invalid' [ 73.857755][ T7113] debugfs: creating file 'halt_wakeup' [ 73.857830][ T7113] debugfs: creating file 'halt_poll_success_ns' [ 73.857872][ T7113] debugfs: creating file 'halt_poll_fail_ns' [ 73.857921][ T7113] debugfs: creating file 'halt_wait_ns' [ 73.857971][ T7113] debugfs: creating file 'halt_poll_success_hist' [ 73.858022][ T7113] debugfs: creating file 'halt_poll_fail_hist' [ 73.858063][ T7113] debugfs: creating file 'halt_wait_hist' [ 73.858102][ T7113] debugfs: creating file 'blocking' [ 73.858142][ T7113] debugfs: creating file 'pf_taken' [ 73.858189][ T7113] debugfs: creating file 'pf_fixed' [ 73.858239][ T7113] debugfs: creating file 'pf_emulate' [ 73.858289][ T7113] debugfs: creating file 'pf_spurious' [ 73.858339][ T7113] debugfs: creating file 'pf_fast' [ 73.858390][ T7113] debugfs: creating file 'pf_mmio_spte_created' [ 73.858493][ T7113] debugfs: creating file 'pf_guest' [ 73.858544][ T7113] debugfs: creating file 'tlb_flush' [ 73.858592][ T7113] debugfs: creating file 'invlpg' [ 73.858645][ T7113] debugfs: creating file 'exits' [ 73.858693][ T7113] debugfs: creating file 'io_exits' [ 73.858825][ T7113] debugfs: creating file 'mmio_exits' [ 73.858878][ T7113] debugfs: creating file 'signal_exits' [ 73.858928][ T7113] debugfs: creating file 'irq_window_exits' [ 73.858980][ T7113] debugfs: creating file 'nmi_window_exits' [ 73.859029][ T7113] debugfs: creating file 'l1d_flush' [ 73.859081][ T7113] debugfs: creating file 'halt_exits' [ 73.859132][ T7113] debugfs: creating file 'request_irq_exits' [ 73.859183][ T7113] debugfs: creating file 'irq_exits' [ 73.859233][ T7113] debugfs: creating file 'host_state_reload' [ 73.859283][ T7113] debugfs: creating file 'fpu_reload' [ 73.859331][ T7113] debugfs: creating file 'insn_emulation' [ 73.859381][ T7113] debugfs: creating file 'insn_emulation_fail' [ 73.859432][ T7113] debugfs: creating file 'hypercalls' [ 73.859483][ T7113] debugfs: creating file 'irq_injections' [ 73.859531][ T7113] debugfs: creating file 'nmi_injections' [ 73.859581][ T7113] debugfs: creating file 'req_event' [ 73.859629][ T7113] debugfs: creating file 'nested_run' [ 73.859691][ T7113] debugfs: creating file 'directed_yield_attempted' [ 73.859744][ T7113] debugfs: creating file 'directed_yield_successful' [ 73.859795][ T7113] debugfs: creating file 'preemption_reported' [ 73.859931][ T7113] debugfs: creating file 'preemption_other' [ 73.859984][ T7113] debugfs: creating file 'guest_mode' [ 73.860034][ T7113] debugfs: creating file 'notify_window_exits' [ 73.860081][ T7113] debugfs: creating file 'mmu_rmaps_stat' [ 73.861198][ T7113] kobject: 'kvm' (ffff888025dfb000): kobject_uevent_env [ 73.861266][ T7113] kobject: 'kvm' (ffff888025dfb000): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 73.878097][ T7113] MPTCP: sched=default [ 73.878221][ T7113] MPTCP: msk=ffff888027e59880 [ 73.929821][ T7115] kcov: kcov_start: t = ffff88802a1acb00, size = 524288, area = ffffc90024149000 [ 73.930334][ T7115] 9pnet_fd: p9_fd_create_unix (7115): problem connecting socket: ./cgroup: -111 [ 73.936338][ T7115] debugfs: creating file 'vcpu2' [ 73.936384][ T7115] debugfs: creating file 'pid' [ 73.936412][ T7115] debugfs: creating file 'guest_mode' [ 73.936439][ T7115] debugfs: creating file 'tsc-offset' [ 73.938011][ T7115] usb usb7: usb auto-resume [ 73.938038][ T7115] usb usb7: dummy_bus_resume [ 73.938051][ T7115] hub 7-0:1.0: hub_resume [ 73.938155][ T62] hub 7-0:1.0: state 7 ports 1 chg 0000 evt 0000 [ 73.938373][ T7115] usb usb7: usbfs: process 7115 (syz.0.307) did not claim interface 0 before use [ 73.964383][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 73.964761][ T5808] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 73.999195][ T7065] sctp: sctp_close: sk:ffff88805ab44ec0, timeout:0 [ 73.999214][ T7065] sctp: sctp_destroy_sock: sk:ffff88805ab44ec0 [ 73.999413][ T7066] sctp: sctp_close: sk:ffff88802d2bae40, timeout:0 [ 73.999428][ T7066] sctp: sctp_do_sm[pre-fn]: ep:ffff888029957c00, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:ffff8880286e2000[STATE_COOKIE_WAIT], sctp_sf_cookie_wait_prm_shutdown [ 73.999444][ T7066] sctp: sctp_do_sm[post-fn]: asoc:ffff8880286e2000, status:DISPOSITION_DELETE_TCB [ 73.999458][ T7066] sctp: sctp_cmd_new_state: asoc:ffff8880286e2000[STATE_CLOSED] [ 73.999510][ T7066] sctp: sctp_packet_free: packet:ffff888037fd0308 [ 73.999535][ T7066] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 73.999546][ T7066] sctp: sctp_destroy_sock: sk:ffff88802d2bae40 [ 73.999592][ T7066] kcov: kcov_task_exit: t = ffff88802b550000, kcov->t = ffff88802b550000 [ 73.999690][ T7080] kcov: kcov_task_exit: t = ffff88803fada580, kcov->t = ffff88803fada580 [ 73.999822][ T7087] kcov: kcov_task_exit: t = ffff88802b598000, kcov->t = ffff88802b598000 [ 74.023636][ T7075] kcov: kcov_task_exit: t = ffff888026c68000, kcov->t = ffff888026c68000 [ 74.069027][ T7099] Modules linked in: [ 74.070230][ T7099] CPU: 0 UID: 0 PID: 7099 Comm: syz.2.303 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.073455][ T7099] Tainted: [L]=SOFTLOCKUP [ 74.074894][ T7099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.078024][ T7099] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 74.079690][ T7099] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 c8 63 6f 06 45 85 c0 75 13 48 8d 3d cc 6f 72 06 48 c7 c6 c0 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 74.085788][ T7099] RSP: 0018:ffffc90022307800 EFLAGS: 00010246 [ 74.087677][ T7099] RAX: 0000000000000003 RBX: ffff8880299751c0 RCX: 1ffffffff248b340 [ 74.090096][ T7099] RDX: 0000000000000000 RSI: ffffffff8beff6c0 RDI: ffffffff9248a610 [ 74.092474][ T7099] RBP: ffffc90022307970 R08: 0000000000000000 R09: 0000000000000000 [ 74.094878][ T7099] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 74.097251][ T7099] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888029785b60 [ 74.099637][ T7099] FS: 0000000000000000(0000) GS:ffff8880d4946000(0000) knlGS:0000000000000000 [ 74.102360][ T7099] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.104470][ T7099] CR2: 0000200000000900 CR3: 000000002822e000 CR4: 0000000000352ef0 [ 74.106863][ T7099] Call Trace: [ 74.107889][ T7099] [ 74.108812][ T7099] ? virtio_gpu_free_object+0xec/0x280 [ 74.110503][ T7099] ? drm_gem_fb_destroy+0x1a1/0x210 [ 74.112071][ T7099] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 74.113783][ T7099] ? __pfx___mutex_lock+0x10/0x10 [ 74.115463][ T7099] ? drm_mode_object_put+0x41/0x50 [ 74.117088][ T7099] ? drm_mode_rmfb.part.0+0x2cd/0x500 [ 74.118702][ T7099] ? __pfx_drm_mode_rmfb.part.0+0x10/0x10 [ 74.120493][ T7099] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 74.122396][ T7099] ? virtio_gpu_free_object+0xec/0x280 [ 74.124046][ T7099] virtio_gpu_free_object+0xec/0x280 [ 74.124464][ C3] wireguard: wg0: Sending keepalive packet to peer 8 ([::1]:20003/0%0) [ 74.128091][ T7099] ? __pfx_virtio_gpu_free_object+0x10/0x10 [ 74.129861][ T7099] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 74.131785][ T7099] drm_gem_object_free+0x60/0xa0 [ 74.133310][ T7099] drm_client_buffer_delete+0x1d8/0x270 [ 74.135058][ T7099] drm_fbdev_shmem_fb_destroy+0xc5/0x110 [ 74.136771][ T7099] ? __pfx_drm_fbdev_shmem_fb_destroy+0x10/0x10 [ 74.138616][ T7099] put_fb_info+0xb8/0xf0 [ 74.139890][ T7099] fb_release+0x13e/0x190 [ 74.141200][ T7099] ? __pfx_fb_release+0x10/0x10 [ 74.142661][ T7099] __fput+0x400/0xb60 [ 74.143853][ T7099] task_work_run+0x150/0x240 [ 74.145371][ T7099] ? __pfx_task_work_run+0x10/0x10 [ 74.147012][ T7099] ? do_raw_spin_unlock+0x145/0x1e0 [ 74.148616][ T7099] do_exit+0x8da/0x2a50 [ 74.149924][ T7099] ? __pfx_do_exit+0x10/0x10 [ 74.151332][ T7099] ? do_raw_spin_lock+0x128/0x260 [ 74.152840][ T7099] ? find_held_lock+0x2b/0x80 [ 74.154278][ T7099] ? get_signal+0x7e0/0x21e0 [ 74.155729][ T7099] do_group_exit+0xd5/0x2a0 [ 74.157121][ T7099] get_signal+0x1ec7/0x21e0 [ 74.158478][ T7099] ? __pfx_get_signal+0x10/0x10 [ 74.159940][ T7099] arch_do_signal_or_restart+0x91/0x7e0 [ 74.161608][ T7099] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 74.163477][ T7099] ? fput+0x7c/0x100 [ 74.164735][ T7099] exit_to_user_mode_loop+0x139/0x700 [ 74.166351][ T7099] ? rcu_is_watching+0x13/0xc0 [ 74.167778][ T7099] do_syscall_64+0x661/0x790 [ 74.169178][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.170938][ T7099] RIP: 0033:0x7f112d19e1d9 [ 74.172293][ T7099] Code: Unable to access opcode bytes at 0x7f112d19e1af. [ 74.174392][ T7099] RSP: 002b:00007f112e027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.176782][ T7099] RAX: 0000000000000001 RBX: 00007f112d425fa0 RCX: 00007f112d19e1d9 [ 74.179086][ T7099] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 74.181508][ T7099] RBP: 00007f112d235888 R08: 0000000000000000 R09: 0000000000000000 [ 74.183802][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.186268][ T7099] R13: 00007f112d426038 R14: 00007f112d425fa0 R15: 00007ffce11da918 [ 74.188665][ T7099] [ 74.189621][ T7099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.191825][ T7099] CPU: 0 UID: 0 PID: 7099 Comm: syz.2.303 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.194989][ T7099] Tainted: [L]=SOFTLOCKUP [ 74.196268][ T7099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.199225][ T7099] Call Trace: [ 74.200220][ T7099] [ 74.201118][ T7099] dump_stack_lvl+0x100/0x190 [ 74.202544][ T7099] vpanic+0x553/0x970 [ 74.203748][ T7099] ? __pfx_vpanic+0x10/0x10 [ 74.205109][ T7099] ? lock_release+0x24d/0x310 [ 74.206520][ T7099] panic+0xd1/0xe0 [ 74.207648][ T7099] ? __pfx_panic+0x10/0x10 [ 74.208992][ T7099] check_panic_on_warn.cold+0x19/0x34 [ 74.210596][ T7099] ? __mutex_lock+0x944/0x1bd0 [ 74.212035][ T7099] __warn.cold+0x191/0x318 [ 74.213385][ T7099] __report_bug+0x30f/0x440 [ 74.214793][ T7099] ? __mutex_lock+0x944/0x1bd0 [ 74.216232][ T7099] ? __pfx___report_bug+0x10/0x10 [ 74.217769][ T7099] ? fb_release+0x13e/0x190 [ 74.219111][ T7099] ? __fput+0x400/0xb60 [ 74.220370][ T7099] ? task_work_run+0x150/0x240 [ 74.221813][ T7099] report_bug_entry+0xe2/0x290 [ 74.223256][ T7099] ? __mutex_lock+0x94b/0x1bd0 [ 74.224693][ T7099] handle_bug+0x1cd/0x2a0 [ 74.226037][ T7099] exc_invalid_op+0x17/0x50 [ 74.227410][ T7099] asm_exc_invalid_op+0x1a/0x20 [ 74.228877][ T7099] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 74.230488][ T7099] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 c8 63 6f 06 45 85 c0 75 13 48 8d 3d cc 6f 72 06 48 c7 c6 c0 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 74.236155][ T7099] RSP: 0018:ffffc90022307800 EFLAGS: 00010246 [ 74.238012][ T7099] RAX: 0000000000000003 RBX: ffff8880299751c0 RCX: 1ffffffff248b340 [ 74.240334][ T7099] RDX: 0000000000000000 RSI: ffffffff8beff6c0 RDI: ffffffff9248a610 [ 74.242804][ T7099] RBP: ffffc90022307970 R08: 0000000000000000 R09: 0000000000000000 [ 74.245131][ T7099] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 74.247495][ T7099] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888029785b60 [ 74.249857][ T7099] ? virtio_gpu_free_object+0xec/0x280 [ 74.251531][ T7099] ? drm_gem_fb_destroy+0x1a1/0x210 [ 74.253102][ T7099] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 74.254806][ T7099] ? __pfx___mutex_lock+0x10/0x10 [ 74.256308][ T7099] ? drm_mode_object_put+0x41/0x50 [ 74.257896][ T7099] ? drm_mode_rmfb.part.0+0x2cd/0x500 [ 74.259480][ T7099] ? __pfx_drm_mode_rmfb.part.0+0x10/0x10 [ 74.261177][ T7099] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 74.263038][ T7099] ? virtio_gpu_free_object+0xec/0x280 [ 74.264664][ T7099] virtio_gpu_free_object+0xec/0x280 [ 74.266259][ T7099] ? __pfx_virtio_gpu_free_object+0x10/0x10 [ 74.268015][ T7099] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 74.269899][ T7099] drm_gem_object_free+0x60/0xa0 [ 74.271338][ T7099] drm_client_buffer_delete+0x1d8/0x270 [ 74.273001][ T7099] drm_fbdev_shmem_fb_destroy+0xc5/0x110 [ 74.274700][ T7099] ? __pfx_drm_fbdev_shmem_fb_destroy+0x10/0x10 [ 74.276554][ T7099] put_fb_info+0xb8/0xf0 [ 74.277857][ T7099] fb_release+0x13e/0x190 [ 74.279183][ T7099] ? __pfx_fb_release+0x10/0x10 [ 74.280624][ T7099] __fput+0x400/0xb60 [ 74.281835][ T7099] task_work_run+0x150/0x240 [ 74.283223][ T7099] ? __pfx_task_work_run+0x10/0x10 [ 74.284781][ T7099] ? do_raw_spin_unlock+0x145/0x1e0 [ 74.286336][ T7099] do_exit+0x8da/0x2a50 [ 74.287619][ T7099] ? __pfx_do_exit+0x10/0x10 [ 74.289043][ T7099] ? do_raw_spin_lock+0x128/0x260 [ 74.290553][ T7099] ? find_held_lock+0x2b/0x80 [ 74.291979][ T7099] ? get_signal+0x7e0/0x21e0 [ 74.293395][ T7099] do_group_exit+0xd5/0x2a0 [ 74.294777][ T7099] get_signal+0x1ec7/0x21e0 [ 74.296195][ T7099] ? __pfx_get_signal+0x10/0x10 [ 74.297774][ T7099] arch_do_signal_or_restart+0x91/0x7e0 [ 74.299431][ T7099] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 74.301266][ T7099] ? fput+0x7c/0x100 [ 74.302445][ T7099] exit_to_user_mode_loop+0x139/0x700 [ 74.304028][ T7099] ? rcu_is_watching+0x13/0xc0 [ 74.305474][ T7099] do_syscall_64+0x661/0x790 [ 74.306874][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.308623][ T7099] RIP: 0033:0x7f112d19e1d9 [ 74.309954][ T7099] Code: Unable to access opcode bytes at 0x7f112d19e1af. [ 74.311987][ T7099] RSP: 002b:00007f112e027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.314476][ T7099] RAX: 0000000000000001 RBX: 00007f112d425fa0 RCX: 00007f112d19e1d9 [ 74.316808][ T7099] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 74.319104][ T7099] RBP: 00007f112d235888 R08: 0000000000000000 R09: 0000000000000000 [ 74.321406][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.323690][ T7099] R13: 00007f112d426038 R14: 00007f112d425fa0 R15: 00007ffce11da918 [ 74.325982][ T7099] [ 74.327579][ T7099] Kernel Offset: disabled [ 74.328880][ T7099] Rebooting in 86400 seconds..