last executing test programs: 2.735156459s ago: executing program 3 (id=64): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1}) syz_emit_ethernet(0x16, &(0x7f0000000180)={@local, @link_local, @void, {@llc={0x4, {@snap={0xaa, 0x0, "13", "7ddc03"}}}}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x402}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 2.647169676s ago: executing program 3 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfc, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x7fffffff}}]}, 0x34}}, 0x0) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10', 0x8b) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfc, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x7fffffff}}]}, 0x34}}, 0x0) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10', 0x8b) (async) 2.646449871s ago: executing program 0 (id=69): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x0, 0x1e3) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write$binfmt_script(r3, &(0x7f0000000740)={'#! ', './sys'}, 0x9) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x413, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040800) 2.546761473s ago: executing program 0 (id=70): mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00\x00', 0x3) (async) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@local, 0x1}) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@local}, 0x1}) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x12, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0xfff2, 0x9}, {0xfff1, 0xfff1}, {0xfff1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044850}, 0x24044000) (async) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) (async) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x59) write(r6, &(0x7f0000000240)="cd", 0x1) (async) ioctl$TUNSETLINK(r6, 0x400454cd, 0x325) 2.545967289s ago: executing program 3 (id=71): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="f000000010000100feffffbf00010000fe8000000000000000000000000000aaff01000000000000f600000000000000000100044e230000000000003a00000049fa719718bc3cd08694ed5095e00445c9d625fb42cb30f141af163836eadba352f2128a649a842a4e16795b7a873021a433add0d4007c21d0a4b3ad1a8767c9487ef014bab8a719dd3bcd652d8bd1658f2f2f2cbba50712cc5cea375216e241175480f029deeecfc2f469bc3cc999f3b25d2500dc432b0dc70b942a0d8080ead9f66b446b567e8a", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700000000000020000fd2000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0xff}, 0x6e6bbf}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x4}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}}, 0x0) 2.446888321s ago: executing program 3 (id=72): r0 = memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r1, &(0x7f0000001400)=[{&(0x7f0000002700)=""/4106, 0x100a}], 0x1) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl(r0, 0x3, &(0x7f00000003c0)="af435447789b5027f8283224f368d65a1285de31cacc8ce2e9f623f3f66c20a845a465de77fa9f32cfb5bae454a7542d7b126f77c9c4e4083a26e417b795d17b585d4f76c7") syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x2}, {0x26, "a87913d0d57a491353929a15e8fc46176cccaf50386acb56f6fe83b775bc3aae61e2ecde310cc2de0972c77aa7af858dcf761af1cb81a78f03ffbdfc6a41807b"}}}}, 0x47) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) syz_fuse_handle_req(r3, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x50906000, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x100, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="62977c5c1b3441cd01b532b419da2061106e1e89d52e272760bd137cb6d1152a727a2bc4663df7ba4752d8b7d08f56d5a6c7817a90fd16e3d181faef03ce48a86cd96758ff6cf82c57bca2134db013112dd60c3662a9ed44f22ae5665301e6b0dca327c97a728c73648cf6e25e8cb01ce2452525709fab6e8ee3ace7d81ca922721472d06a9e7e6f672236b2efc4cb4e0bab345d236dcfac70b34a4cad408dc6da99b2bec59e345d262ead8069bb4a3bdb38527d7a26655fb5a23b0a62757321ab4ce65efb422965d7a5a92be659c2197eca2e84a9df6239f50ac95c546f4e3fa83f60c7981a1c4639428695cab533", @ANYRESHEX=r4, @ANYRESDEC=r0], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="30052d857000fcdbdf25020000000500050002000000040004000500050005000000"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000600)=0x7ea, 0x4) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 1.95658749s ago: executing program 1 (id=78): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) write$RDMA_USER_CM_CMD_REJECT(r1, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xb30, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa98, 0x178, 0x178, 0xa98, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1e8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100010001}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1346, 0x7fff, 0x0, '\x00', {0x7ff}}}}, {{@uncond, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x7}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x3}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x3}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0xc8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8, 0x2}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0xffffffff, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb90) 1.956278489s ago: executing program 0 (id=79): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) (async, rerun: 64) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) (async) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000040)=0xfffffff7) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000100000081"]) r4 = syz_open_pts(r1, 0x8040) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000200)={&(0x7f0000000140)=[{0xbf, 0x1, 0x0, {0xff, 0x6, 0x2}}, {0xffff, 0x1, 0x0, {0x7f, 0xfff, 0x1}}, {0xc6e, 0x2, 0x0, {0x8, 0xfffeffff, 0x2}}, {0x8, 0x2, 0x0, {0x6, 0x1, 0x2}}, {0x80, 0x2, 0x0, {0x2, 0x9}}], 0x5, 0x20, 0x69f4, 0x8}) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x1) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r5, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.886409006s ago: executing program 1 (id=80): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) (rerun: 64) r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 32) mkdirat(r0, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x100) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES8=r6], 0x48}, 0x1, 0x0, 0x0, 0x40c8091}, 0x48800) (async) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x600, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = dup(r12) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r12, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r14, 0xae80, 0x0) 1.646244818s ago: executing program 0 (id=81): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_CAP_HYPERV_SEND_IPI(r0, 0x4068aea3, &(0x7f0000000280)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @loopback}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) preadv(r6, &(0x7f00000015c0), 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x9000, 0x1000, &(0x7f0000431000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 1.64592037s ago: executing program 1 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1df) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f00000001c0)={0x0, {0x52, 0x1f}}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) pwrite64(r1, &(0x7f0000000000)="ff", 0x1, 0x1000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) 1.577197578s ago: executing program 1 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 1.57676585s ago: executing program 0 (id=84): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x181000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='mountstats\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYRESHEX=r5, @ANYRES32=r6, @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0xc8c1) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0d00000001000000040000000700000000000000", @ANYRES32=r7], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r9, &(0x7f0000000080), 0x0}, 0x20) unlink(&(0x7f00000002c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x14, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10, r10, 0xc67a1000) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1.178240136s ago: executing program 2 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="653a6d795f726561645f6d737231202d12725236bdb1a498e4c59cb27a1671339a254188fb2a8b47b404f1a79012dbca52da81eadc8cb45d0e4e833ca479b79b6342a3b4a9b5173ce58618a56e1feff1f6244756447e17c5e5a6572f05a63ec937b5ddecc77d9cef151bf6bca020274bb65e1ee739a0588a618a79be47d707824b", 0x81) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) 1.17673999s ago: executing program 1 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r4, &(0x7f0000000600)='dir .', 0x5) write(r4, &(0x7f0000000700)='bind', 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mprotect(&(0x7f00003b7000/0x2000)=nil, 0x2000, 0x1) 841.950219ms ago: executing program 0 (id=90): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = fanotify_init(0x4, 0x0) lseek(r2, 0xff, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r1, 0xa) connect$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r1, 0x0, 0x0) sendmsg(r3, 0x0, 0x0) recvmsg(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x70bd2b, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180), 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000390423bd7000fbdbdf", @ANYRES32=r7, @ANYBLOB="81b8000000000000300012800b000100697036746e6c"], 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000100)=0x203) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x63, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r10, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff8500fba2f130000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 491.599033ms ago: executing program 2 (id=91): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000001f00000002040000ff03", @ANYRES32=0x0], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x40) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x33041000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd28, 0x25dfdbfb, 0x0, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000100)) ioctl$PPPIOCSMRRU(r0, 0x4010744d, &(0x7f0000000080)=0xc) 436.959075ms ago: executing program 1 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x44) write(r5, &(0x7f0000000240)='46618451-8636-4076-a006-25816b8ff40c', 0x24) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0x0, 0x8000001}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES16=r6, @ANYRES8=0x0], 0x6f4}, 0x1, 0x0, 0x0, 0x8045}, 0x4081) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001bc0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xd}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xb8b, 0xffffffffffffffff, 0x5, 0x3, 0x40, {0x2, 0x2, 0x68ac, 0x7, 0x9, 0x7d}, {0x9, 0x0, 0x3}, 0x80, 0x6, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x41f419cd}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={0x1c, 0x37, 0x107, 0xfffffffe, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x6, 0x7, 0x0, 0x1, [@generic="fd2e"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000002c0)={r12, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x4c, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x3, 0xfff1}, {0x4, 0xe}, {0xc}}, [{0x8, 0xb, 0xf18}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) 356.52882ms ago: executing program 2 (id=93): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsync(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000001c0)="051a00000e80006558", 0x9}], 0x2) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) lseek(r1, 0xfffffffffffffffc, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x4, 0x12) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x10, 0x8, 0x4c7c, 0xc, {{0x1e, 0x4, 0x2, 0x28, 0x78, 0x64, 0x0, 0xe4, 0x29, 0x0, @empty, @remote, {[@lsrr={0x83, 0x1f, 0x40, [@remote, @private=0xa010101, @local, @local, @remote, @private=0xa010100, @broadcast]}, @timestamp_addr={0x44, 0x24, 0x66, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0xf0}, {@multicast2}, {@broadcast, 0x8}, {@multicast1, 0xffff097d}]}, @noop, @cipso={0x86, 0x1d, 0x0, [{0x6, 0x12, "130e0b25f8af7313c4ae1a5b1bc6e3f2"}, {0x2, 0x3, "13"}, {0x1, 0x2}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x12c, r7, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xdaca69611f6956f2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24041050}, 0x440c0) userfaultfd(0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0x8, 0x4) 254.999123ms ago: executing program 3 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file0', [{0x20, 'cpuacct.usage_percpu_user\x00'}, {0x20, 'cpuacct.usage_percpu_user\x00'}], 0xa, "c3355326d1ad41f8be46af828dfecf74d97e95721b37de3d3d7a699df853574369e677f8aad4da647b07e4d74e268b929bc6fd12a133bd4bf046af6779193ee18b2dbb13"}, 0x85) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000030000a80390001800a00010071756575650000001c0002800600034000040000060001400000000006000240000400000900010073797a300000"], 0x84}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e6576650000600002800500"], 0x90}}, 0x4048084) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 146.238045ms ago: executing program 2 (id=95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0x3) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@fwd={0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x6}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x44}, 0x20) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000740)={0x0, 0xf, 0xe96, 0x1}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async) socket(0x1f, 0x80000, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x513000, 0x1000, 0x0, 0x1}, 0x20) (async) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000001100)={0xa, 0x4a21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c, 0x0}, 0xd158e5cd336140dd) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x8040480) (async, rerun: 32) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 145.638112ms ago: executing program 3 (id=96): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0xa091828e00f7f69c, 0x7, 0x2, 0x1, {{0x12, 0x4, 0x2, 0x4, 0x48, 0x68, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @remote, {[@timestamp={0x44, 0x8, 0x75, 0x0, 0x2, [0x80000001]}, @rr={0x7, 0x27, 0x58, [@rand_addr=0x64010102, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x11}, @remote, @loopback, @loopback, @broadcast, @private=0xa010100, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2f, &(0x7f0000000480), 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x880}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x6}]}}}]}, 0x3c}}, 0x0) 1.708892ms ago: executing program 2 (id=97): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000010000005566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080600000c0003"], 0x58}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@gettaction={0x20, 0x5a, 0x1, 0x70bc2c, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) 0s ago: executing program 2 (id=98): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0xa}, {0xfff3, 0x10}}}, 0x24}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtclass={0x2c, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0xe, 0xb}, {0x8, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x2c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x16d801, 0x0) write(r4, &(0x7f0000000400)='./file0\n', 0x8) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCMBIS(r6, 0x5416, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r8, r7, 0x0, 0x200000000005197) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:22937' (ED25519) to the list of known hosts. [ 42.434895][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 42.434980][ T43] audit: type=1400 audit(1788501834.345:141): avc: denied { mounton } for pid=5718 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.438937][ T43] audit: type=1400 audit(1788501834.345:142): avc: denied { mount } for pid=5718 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.443060][ T5718] cgroup: Unknown subsys name 'net' [ 42.444905][ T43] audit: type=1400 audit(1788501834.355:143): avc: denied { unmount } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.584888][ T5718] cgroup: Unknown subsys name 'cpuset' [ 42.589632][ T5718] cgroup: Unknown subsys name 'rlimit' [ 42.743536][ T43] audit: type=1400 audit(1788501834.655:144): avc: denied { setattr } for pid=5718 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.746657][ T43] audit: type=1400 audit(1788501834.655:145): avc: denied { create } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.746705][ T43] audit: type=1400 audit(1788501834.655:146): avc: denied { write } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.746740][ T43] audit: type=1400 audit(1788501834.655:147): avc: denied { read } for pid=5718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.769578][ T43] audit: type=1400 audit(1788501834.675:148): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.774901][ T43] audit: type=1400 audit(1788501834.695:149): avc: denied { read } for pid=5443 comm="dhcpcd" name="n31" dev="tmpfs" ino=1885 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.774965][ T43] audit: type=1400 audit(1788501834.695:150): avc: denied { open } for pid=5443 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1885 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.827538][ T5728] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.583245][ T5718] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.445340][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 47.445444][ T43] audit: type=1400 audit(1788501839.365:157): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.445718][ T43] audit: type=1400 audit(1788501839.365:158): avc: denied { read write } for pid=5734 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.446125][ T43] audit: type=1400 audit(1788501839.365:159): avc: denied { open } for pid=5734 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.453573][ T43] audit: type=1400 audit(1788501839.365:160): avc: denied { ioctl } for pid=5734 comm="syz-executor" path="socket:[1934]" dev="sockfs" ino=1934 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.495596][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.497328][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.497546][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.500128][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.500378][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.500510][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.502511][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.504329][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.504673][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.506223][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.506881][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.506917][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.508942][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.509102][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.509564][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.510506][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.511712][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.512060][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.514820][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.521217][ T43] audit: type=1400 audit(1788501839.445:161): avc: denied { read } for pid=5740 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.521487][ T43] audit: type=1400 audit(1788501839.445:162): avc: denied { open } for pid=5740 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.522332][ T43] audit: type=1400 audit(1788501839.445:163): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.523374][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.526257][ T43] audit: type=1400 audit(1788501839.445:164): avc: denied { module_request } for pid=5740 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.548053][ T43] audit: type=1400 audit(1788501839.465:165): avc: denied { sys_module } for pid=5740 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.195596][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.195673][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.195775][ T5739] bridge_slave_0: entered allmulticast mode [ 48.196549][ T5739] bridge_slave_0: entered promiscuous mode [ 48.201947][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.202463][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.202570][ T5739] bridge_slave_1: entered allmulticast mode [ 48.204069][ T5739] bridge_slave_1: entered promiscuous mode [ 48.205204][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.205275][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.205387][ T5734] bridge_slave_0: entered allmulticast mode [ 48.206570][ T5734] bridge_slave_0: entered promiscuous mode [ 48.240269][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.240387][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.240669][ T5734] bridge_slave_1: entered allmulticast mode [ 48.241483][ T5734] bridge_slave_1: entered promiscuous mode [ 48.286397][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.286531][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.286714][ T5740] bridge_slave_0: entered allmulticast mode [ 48.287552][ T5740] bridge_slave_0: entered promiscuous mode [ 48.289136][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.289177][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.289231][ T5740] bridge_slave_1: entered allmulticast mode [ 48.290038][ T5740] bridge_slave_1: entered promiscuous mode [ 48.292719][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.294111][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.296400][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.317227][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.360678][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.360820][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.360888][ T5738] bridge_slave_0: entered allmulticast mode [ 48.361756][ T5738] bridge_slave_0: entered promiscuous mode [ 48.365516][ T5734] team0: Port device team_slave_0 added [ 48.371232][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.373211][ T5739] team0: Port device team_slave_0 added [ 48.373387][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.373453][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.373520][ T5738] bridge_slave_1: entered allmulticast mode [ 48.374320][ T5738] bridge_slave_1: entered promiscuous mode [ 48.383244][ T5734] team0: Port device team_slave_1 added [ 48.392921][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.405297][ T5739] team0: Port device team_slave_1 added [ 48.426982][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.451167][ T5740] team0: Port device team_slave_0 added [ 48.451756][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.451766][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.451779][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.453221][ T5740] team0: Port device team_slave_1 added [ 48.454266][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.461489][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.461500][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.461513][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.462513][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.462522][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.462536][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.469117][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.469130][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.469145][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.505470][ T5738] team0: Port device team_slave_0 added [ 48.508070][ T5738] team0: Port device team_slave_1 added [ 48.508742][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.508750][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.508762][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.531245][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.531261][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.531274][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.541364][ T5734] hsr_slave_0: entered promiscuous mode [ 48.541892][ T5734] hsr_slave_1: entered promiscuous mode [ 48.558159][ T5739] hsr_slave_0: entered promiscuous mode [ 48.558683][ T5739] hsr_slave_1: entered promiscuous mode [ 48.558980][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 48.559047][ T5739] Cannot create hsr debugfs directory [ 48.560003][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.560014][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.560028][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.561156][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.561166][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.561179][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.596270][ T5740] hsr_slave_0: entered promiscuous mode [ 48.596852][ T5740] hsr_slave_1: entered promiscuous mode [ 48.597224][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 48.597238][ T5740] Cannot create hsr debugfs directory [ 48.661153][ T5738] hsr_slave_0: entered promiscuous mode [ 48.661642][ T5738] hsr_slave_1: entered promiscuous mode [ 48.661944][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 48.661956][ T5738] Cannot create hsr debugfs directory [ 48.914772][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.924505][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.925054][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.928892][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.935953][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.941109][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.941692][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.945604][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.015940][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.020465][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.024341][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.028915][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.031494][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.036144][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.044826][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.049472][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.132483][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.138264][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.139736][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.145166][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.148834][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.155699][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.158523][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.162869][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.198026][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.251442][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.251751][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.257591][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.258685][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.263904][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.269961][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.276483][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.277246][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.280871][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.302862][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.303032][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.318046][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.323753][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.323875][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.347371][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.366263][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.366328][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.392162][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.392282][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.413302][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.448880][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.462595][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.462791][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.485616][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.498639][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.498823][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.518607][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.542219][ T5748] Bluetooth: hci3: command tx timeout [ 49.552555][ T5748] Bluetooth: hci0: command tx timeout [ 49.552571][ T5088] Bluetooth: hci1: command tx timeout [ 49.558204][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.558279][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.567881][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.567974][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.621666][ T5088] Bluetooth: hci2: command tx timeout [ 49.698582][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.755071][ T5734] veth0_vlan: entered promiscuous mode [ 49.766860][ T5734] veth1_vlan: entered promiscuous mode [ 49.778561][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.824215][ T5734] veth0_macvtap: entered promiscuous mode [ 49.834540][ T5734] veth1_macvtap: entered promiscuous mode [ 49.849646][ T5739] veth0_vlan: entered promiscuous mode [ 49.864518][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.869004][ T5739] veth1_vlan: entered promiscuous mode [ 49.874382][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.883665][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.906806][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.937638][ T5739] veth0_macvtap: entered promiscuous mode [ 49.962202][ T5739] veth1_macvtap: entered promiscuous mode [ 49.991233][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.991345][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.015172][ T5740] veth0_vlan: entered promiscuous mode [ 50.037310][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.043590][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.043624][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.050005][ T5738] veth0_vlan: entered promiscuous mode [ 50.053294][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.059088][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.062693][ T5738] veth1_vlan: entered promiscuous mode [ 50.066230][ T5740] veth1_vlan: entered promiscuous mode [ 50.074176][ T43] audit: type=1400 audit(1788501841.985:166): avc: denied { mount } for pid=5734 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.092963][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.093434][ T5814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.093749][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.116569][ T5738] veth0_macvtap: entered promiscuous mode [ 50.144030][ T5738] veth1_macvtap: entered promiscuous mode [ 50.145456][ T5734] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.151182][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.153248][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.156643][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.158257][ T5740] veth0_macvtap: entered promiscuous mode [ 50.161891][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.161905][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.163204][ T5814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.163241][ T5814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.163263][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.163284][ T5814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.169087][ T5740] veth1_macvtap: entered promiscuous mode [ 50.210942][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.211003][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.213337][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.220903][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.220968][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.220994][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.229591][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.236435][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.236504][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.236560][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.236580][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.259019][ T5885] FAULT_INJECTION: forcing a failure. [ 50.259019][ T5885] name failslab, interval 1, probability 0, space 0, times 1 [ 50.259084][ T5885] CPU: 1 UID: 0 PID: 5885 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 50.259108][ T5885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.259115][ T5885] Call Trace: [ 50.259120][ T5885] [ 50.259124][ T5885] dump_stack_lvl+0x100/0x190 [ 50.259168][ T5885] should_fail_ex.cold+0x5/0xa [ 50.259185][ T5885] should_failslab+0xc2/0x120 [ 50.259198][ T5885] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 50.259210][ T5885] ? sidtab_sid2str_get+0x84/0x670 [ 50.259223][ T5885] ? sidtab_sid2str_get+0x17a/0x670 [ 50.259236][ T5885] kmemdup_noprof+0x29/0x60 [ 50.259252][ T5885] sidtab_sid2str_get+0x17a/0x670 [ 50.259265][ T5885] security_sid_to_context_core+0x373/0x700 [ 50.259285][ T5885] avc_audit_post_callback+0x109/0x910 [ 50.259298][ T5885] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 50.259311][ T5885] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 50.259322][ T5885] ? skb_put+0x138/0x180 [ 50.259336][ T5885] ? audit_log_n_string+0x2a3/0x5a0 [ 50.259358][ T5885] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 50.259370][ T5885] common_lsm_audit+0x23f/0x2b0 [ 50.259395][ T5885] ? __pfx_common_lsm_audit+0x10/0x10 [ 50.259405][ T5885] ? avc_denied+0x14a/0x190 [ 50.259419][ T5885] slow_avc_audit+0x186/0x210 [ 50.259432][ T5885] ? __pfx_slow_avc_audit+0x10/0x10 [ 50.259445][ T5885] ? find_held_lock+0x2b/0x80 [ 50.259460][ T5885] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 50.259478][ T5885] avc_has_perm+0x1a6/0x1e0 [ 50.259492][ T5885] ? __pfx_avc_has_perm+0x10/0x10 [ 50.259509][ T5885] selinux_socket_create+0x215/0x590 [ 50.259527][ T5885] ? __pfx_selinux_socket_create+0x10/0x10 [ 50.259545][ T5885] ? do_futex+0x190/0x440 [ 50.259561][ T5885] security_socket_create+0xa3/0x250 [ 50.259578][ T5885] __sock_create+0x8f/0x860 [ 50.259594][ T5885] __sys_socket+0x14d/0x260 [ 50.259608][ T5885] ? __pfx___sys_socket+0x10/0x10 [ 50.259625][ T5885] __x64_sys_socket+0x72/0xb0 [ 50.259639][ T5885] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.259665][ T5885] do_syscall_64+0x123/0x790 [ 50.259681][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.259693][ T5885] RIP: 0033:0x7f4c4179e159 [ 50.259702][ T5885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.259713][ T5885] RSP: 002b:00007f4c426e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 50.259724][ T5885] RAX: ffffffffffffffda RBX: 00007f4c41a25fa0 RCX: 00007f4c4179e159 [ 50.259731][ T5885] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 50.259737][ T5885] RBP: 00007f4c41835024 R08: 0000000000000000 R09: 0000000000000000 [ 50.259744][ T5885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.259750][ T5885] R13: 00007f4c41a26038 R14: 00007f4c41a25fa0 R15: 00007fffe5721b88 [ 50.259763][ T5885] [ 50.296445][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.296468][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.392191][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.392264][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.424349][ T5895] syz.2.5(5895): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 50.453971][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.454034][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.505761][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.505808][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.508775][ T5899] netlink: 'syz.3.4': attribute type 29 has an invalid length. [ 50.524632][ T5903] ======================================================= [ 50.524632][ T5903] WARNING: The mand mount option has been deprecated and [ 50.524632][ T5903] and is ignored by this kernel. Remove the mand [ 50.524632][ T5903] option from the mount to silence this warning. [ 50.524632][ T5903] ======================================================= [ 50.542102][ T5903] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.549456][ T5903] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 50.623956][ T5903] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 50.632176][ T5903] overlayfs: d_ino too big (., ino=4611686018427387926, xinobits=3) [ 50.637969][ T5903] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 50.638382][ T5903] overlayfs: d_ino too big (gadget, ino=4611686018427391387, xinobits=3) [ 50.647587][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 50.649756][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.651593][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.683489][ T5912] max out of range [ 50.712278][ T5913] FAULT_INJECTION: forcing a failure. [ 50.712278][ T5913] name fail_futex, interval 1, probability 0, space 0, times 1 [ 50.712346][ T5913] CPU: 0 UID: 0 PID: 5913 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(full) [ 50.712371][ T5913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.712380][ T5913] Call Trace: [ 50.712385][ T5913] [ 50.712390][ T5913] dump_stack_lvl+0x100/0x190 [ 50.712414][ T5913] should_fail_ex.cold+0x5/0xa [ 50.712434][ T5913] get_futex_key+0x1d0/0x14f0 [ 50.712453][ T5913] ? __pfx_get_futex_key+0x10/0x10 [ 50.712476][ T5913] futex_wake+0xf4/0x5e0 [ 50.712494][ T5913] ? __pfx_futex_wake+0x10/0x10 [ 50.712511][ T5913] ? percpu_counter_add_batch+0xb9/0x230 [ 50.712530][ T5913] ? errseq_sample+0x51/0x70 [ 50.712547][ T5913] ? file_init_path+0x48e/0x670 [ 50.712562][ T5913] do_futex+0x2b2/0x440 [ 50.712577][ T5913] ? __pfx_do_futex+0x10/0x10 [ 50.712591][ T5913] ? fd_install+0x223/0x580 [ 50.712606][ T5913] __x64_sys_futex+0x34f/0x4d0 [ 50.712623][ T5913] ? __sys_socket+0xac/0x260 [ 50.712640][ T5913] ? __pfx___x64_sys_futex+0x10/0x10 [ 50.712659][ T5913] do_syscall_64+0x123/0x790 [ 50.712674][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.712685][ T5913] RIP: 0033:0x7f9e1cd9e159 [ 50.712695][ T5913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.712706][ T5913] RSP: 002b:00007f9e1dccc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 50.712718][ T5913] RAX: ffffffffffffffda RBX: 00007f9e1d025fa8 RCX: 00007f9e1cd9e159 [ 50.712725][ T5913] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9e1d025fac [ 50.712732][ T5913] RBP: 00007f9e1d025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 50.712738][ T5913] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 50.712744][ T5913] R13: 00007f9e1d026038 R14: 00007fffd978e0e0 R15: 00007fffd978e1c8 [ 50.712758][ T5913] [ 50.731418][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'. [ 50.731454][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'. [ 50.807178][ T1355] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 50.882327][ T5940] Zero length message leads to an empty skb [ 50.926062][ T5948] warning: `syz.2.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.926630][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 50.930022][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 51.073501][ T1355] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 51.113805][ T5968] binder_alloc: 5966: binder_alloc_buf size 1024 failed, no address space [ 51.113890][ T5968] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 51.533777][ T5913] ceph: No mds server is up or the cluster is laggy [ 51.604373][ T5971] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 51.623978][ T5088] Bluetooth: hci0: command tx timeout [ 51.624035][ T5088] Bluetooth: hci3: command tx timeout [ 51.631417][ T5748] Bluetooth: hci1: command tx timeout [ 51.701822][ T5748] Bluetooth: hci2: command tx timeout [ 51.740986][ T5973] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (256 ns). Using initial count to start timer. [ 51.762833][ T5975] netlink: 'syz.0.21': attribute type 21 has an invalid length. [ 51.762971][ T5975] netlink: 152 bytes leftover after parsing attributes in process `syz.0.21'. [ 51.933652][ T5996] netlink: 52 bytes leftover after parsing attributes in process `syz.2.25'. [ 51.933727][ T5996] netlink: 52 bytes leftover after parsing attributes in process `syz.2.25'. [ 51.933769][ T5996] netlink: 52 bytes leftover after parsing attributes in process `syz.2.25'. [ 51.999339][ T5998] capability: warning: `syz.2.27' uses deprecated v2 capabilities in a way that may be insecure [ 52.095739][ T5998] kvm: pic: non byte write [ 52.484178][ T43] kauditd_printk_skb: 105 callbacks suppressed [ 52.486913][ T43] audit: type=1400 audit(1788501844.395:272): avc: denied { mount } for pid=6013 comm="syz.1.31" name="/" dev="configfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 52.743951][ T5853] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.806629][ T43] audit: type=1400 audit(1788501844.715:273): avc: denied { map } for pid=6021 comm="syz.3.33" path="socket:[11341]" dev="sockfs" ino=11341 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 52.809806][ T43] audit: type=1400 audit(1788501844.715:274): avc: denied { load_policy } for pid=6021 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 52.838615][ T43] audit: type=1400 audit(1788501844.745:275): avc: denied { create } for pid=6023 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.843385][ T43] audit: type=1400 audit(1788501844.745:276): avc: denied { bind } for pid=6023 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.843425][ T43] audit: type=1400 audit(1788501844.745:277): avc: denied { accept } for pid=6023 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.846387][ T43] audit: type=1326 audit(1788501844.765:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6023 comm="syz.3.34" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5edd9e159 code=0x0 [ 52.889933][ T43] audit: type=1400 audit(1788501844.795:279): avc: denied { read } for pid=6023 comm="syz.3.34" path="socket:[10837]" dev="sockfs" ino=10837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.890201][ T43] audit: type=1400 audit(1788501844.795:280): avc: denied { write } for pid=6023 comm="syz.3.34" path="socket:[11343]" dev="sockfs" ino=11343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.892510][ T6024] xt_recent: Unsupported userspace flags (000000b2) [ 52.912596][ T5853] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 52.915289][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.915320][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.918080][ T5853] usb 6-1: config 0 descriptor?? [ 53.106679][ T43] audit: type=1400 audit(1788501845.015:281): avc: denied { append } for pid=6028 comm="syz.2.35" name="comedi4" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.121006][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.121251][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.127111][ T5853] usbhid 6-1:0.0: can't add hid device: -71 [ 53.127192][ T5853] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 53.157400][ T5853] usb 6-1: USB disconnect, device number 2 [ 53.161500][ T6036] Bluetooth: MGMT ver 1.23 [ 53.197548][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.199124][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.253717][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.256549][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.311309][ T6044] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 53.311382][ T6044] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 53.401147][ T5814] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.401229][ T5814] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.401280][ T5814] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.401304][ T5814] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.446634][ T6043] mmap: syz.2.38 (6043) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.462125][ T5853] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.590878][ T5853] usb 6-1: device descriptor read/64, error -71 [ 53.702154][ T5748] Bluetooth: hci3: command tx timeout [ 53.702199][ T5748] Bluetooth: hci1: command tx timeout [ 53.722246][ T6065] tmpfs: Unknown parameter 'ip6tnl0' [ 53.780899][ T5088] Bluetooth: hci2: command tx timeout [ 53.830761][ T5853] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 53.960746][ T5853] usb 6-1: device descriptor read/64, error -71 [ 54.072391][ T5853] usb usb6-port1: attempt power cycle [ 54.080690][ T5729] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.250665][ T5729] usb 8-1: Using ep0 maxpacket: 8 [ 54.251454][ T5729] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 54.252493][ T5729] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 54.252518][ T5729] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 54.252541][ T5729] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 54.252555][ T5729] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.252572][ T5729] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.252591][ T5729] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.252611][ T5729] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 54.252630][ T5729] usb 8-1: config 168 interface 0 has no altsetting 0 [ 54.253519][ T5729] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 54.253542][ T5729] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 54.253568][ T5729] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 54.253587][ T5729] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.253605][ T5729] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.253622][ T5729] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.253640][ T5729] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 54.253659][ T5729] usb 8-1: config 168 interface 0 has no altsetting 0 [ 54.254549][ T5729] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 54.254578][ T5729] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 54.254607][ T5729] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 54.254629][ T5729] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.254646][ T5729] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.254664][ T5729] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 54.254682][ T5729] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 54.254702][ T5729] usb 8-1: config 168 interface 0 has no altsetting 0 [ 54.257325][ T5729] usb 8-1: string descriptor 0 read error: -22 [ 54.257390][ T5729] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.266682][ T5729] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 54.310528][ T6082] syzkaller0: entered allmulticast mode [ 54.410709][ T5853] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 54.431378][ T5853] usb 6-1: device descriptor read/8, error -71 [ 54.471680][ T5729] usb 8-1: USB disconnect, device number 2 [ 54.670706][ T5853] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 54.692852][ T5853] usb 6-1: device descriptor read/8, error -71 [ 54.801958][ T5853] usb usb6-port1: unable to enumerate USB device [ 55.027470][ T6096] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 55.034108][ T6095] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 55.551057][ T5088] Bluetooth: hci0: command tx timeout [ 55.577864][ T6138] loop8: detected capacity change from 0 to 7 [ 55.586235][ T6138] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 55.586318][ T6138] loop8: partition table partially beyond EOD, truncated [ 55.592061][ T6138] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 55.594650][ T6138] loop8: p2 start 121280928 is beyond EOD, truncated [ 55.598585][ T6138] netlink: 'syz.3.62': attribute type 2 has an invalid length. [ 55.641344][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 55.692236][ T5814] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.692335][ T5814] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.692379][ T5814] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.692416][ T5814] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.792682][ T5748] Bluetooth: hci3: command tx timeout [ 55.792767][ T5088] Bluetooth: hci1: command tx timeout [ 55.861938][ T5088] Bluetooth: hci2: command tx timeout [ 55.898527][ T6170] __nla_validate_parse: 4 callbacks suppressed [ 55.898807][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 56.175416][ T6172] cgroup: fork rejected by pids controller in /syz0 [ 56.383723][ T6223] FAULT_INJECTION: forcing a failure. [ 56.383723][ T6223] name failslab, interval 1, probability 0, space 0, times 0 [ 56.389390][ T6223] CPU: 2 UID: 0 PID: 6223 Comm: syz.2.76 Not tainted syzkaller #0 PREEMPT(full) [ 56.389433][ T6223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.389444][ T6223] Call Trace: [ 56.389453][ T6223] [ 56.389461][ T6223] dump_stack_lvl+0x100/0x190 [ 56.389506][ T6223] should_fail_ex.cold+0x5/0xa [ 56.389529][ T6223] should_failslab+0xc2/0x120 [ 56.389552][ T6223] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 56.389568][ T6223] ? alloc_inode+0x183/0x250 [ 56.389594][ T6223] alloc_inode+0x183/0x250 [ 56.389616][ T6223] iget_locked+0x1d9/0x6d0 [ 56.389638][ T6223] ? __pfx_iget_locked+0x10/0x10 [ 56.389658][ T6223] ? kernfs_root+0xee/0x2a0 [ 56.389676][ T6223] ? kernfs_root+0xee/0x2a0 [ 56.389699][ T6223] kernfs_get_inode+0x46/0x470 [ 56.389721][ T6223] kernfs_iop_lookup+0x1a7/0x2d0 [ 56.389740][ T6223] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 56.389760][ T6223] lookup_open+0xa79/0x1990 [ 56.389796][ T6223] path_openat+0xa2c/0x2440 [ 56.389818][ T6223] ? __pfx_path_openat+0x10/0x10 [ 56.389834][ T6223] ? __pfx___up_read+0x10/0x10 [ 56.389853][ T6223] ? do_user_addr_fault+0x7d7/0x12f0 [ 56.389873][ T6223] ? do_user_addr_fault+0x7d7/0x12f0 [ 56.389898][ T6223] do_file_open+0x20e/0x430 [ 56.389920][ T6223] ? __pfx_do_file_open+0x10/0x10 [ 56.389938][ T6223] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.389984][ T6223] ? _raw_spin_unlock+0x28/0x50 [ 56.390009][ T6223] ? alloc_fd+0x471/0x7a0 [ 56.390036][ T6223] do_sys_openat2+0x10f/0x1e0 [ 56.390059][ T6223] ? __pfx_do_sys_openat2+0x10/0x10 [ 56.390076][ T6223] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 56.390104][ T6223] __x64_sys_openat+0x12d/0x210 [ 56.390126][ T6223] ? __pfx___x64_sys_openat+0x10/0x10 [ 56.390154][ T6223] do_syscall_64+0x123/0x790 [ 56.390177][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.390192][ T6223] RIP: 0033:0x7f4c4175e98e [ 56.390206][ T6223] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.390219][ T6223] RSP: 002b:00007f4c426bf9b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.390244][ T6223] RAX: ffffffffffffffda RBX: 00007f4c426c06c0 RCX: 00007f4c4175e98e [ 56.390254][ T6223] RDX: 0000000000080001 RSI: 00007f4c41809070 RDI: ffffffffffffff9c [ 56.390264][ T6223] RBP: 00007f4c41809070 R08: 0000000000000000 R09: 0000000000000000 [ 56.390275][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 56.390284][ T6223] R13: 00007f4c426bfa90 R14: 00007f4c41a26090 R15: 00007fffe5721b88 [ 56.390307][ T6223] [ 56.523661][ T6238] syzkaller0: entered promiscuous mode [ 56.523742][ T6238] syzkaller0: entered allmulticast mode [ 56.534393][ T6231] usb usb1: usbfs: process 6231 (syz.0.79) did not claim interface 0 before use [ 56.956298][ T6257] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 56.989686][ T6259] netlink: 'syz.2.86': attribute type 1 has an invalid length. [ 56.989766][ T6259] netlink: 224 bytes leftover after parsing attributes in process `syz.2.86'. [ 57.022301][ T6251] netlink: 36 bytes leftover after parsing attributes in process `syz.0.84'. [ 57.064552][ T6265] e1000e 0000:00:02.0 eth1: removed PHC [ 57.138707][ T6272] netfs: Cache "CacheFiles" added (type cachefiles) [ 57.138788][ T6272] CacheFiles: File cache on CacheFiles registered [ 57.142809][ T6272] CacheFiles: File cache on CacheFiles unregistering [ 57.142821][ T6272] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 57.155839][ T6273] evm: overlay not supported [ 57.192769][ T6265] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 57.541514][ T43] kauditd_printk_skb: 76 callbacks suppressed [ 57.541585][ T43] audit: type=1400 audit(1788501849.455:358): avc: denied { write } for pid=6287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.606366][ T43] audit: type=1400 audit(1788501849.515:359): avc: denied { write } for pid=6290 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.695362][ T43] audit: type=1400 audit(1788501849.605:360): avc: denied { write } for pid=6292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.746911][ T43] audit: type=1400 audit(1788501849.655:361): avc: denied { write } for pid=6295 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.851387][ T43] audit: type=1400 audit(1788501849.735:362): avc: denied { write } for pid=6297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.851495][ T43] audit: type=1400 audit(1788501849.755:363): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 57.882789][ T43] audit: type=1400 audit(1788501849.795:364): avc: denied { read } for pid=6301 comm="syz.2.91" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.882864][ T43] audit: type=1400 audit(1788501849.795:365): avc: denied { open } for pid=6301 comm="syz.2.91" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.882908][ T43] audit: type=1400 audit(1788501849.795:366): avc: denied { ioctl } for pid=6301 comm="syz.2.91" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.889295][ T43] audit: type=1400 audit(1788501849.795:367): avc: denied { write } for pid=6300 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.974660][ T6308] lo speed is unknown, defaulting to 1000 [ 57.978403][ T6308] lo speed is unknown, defaulting to 1000 [ 57.979884][ T6308] lo speed is unknown, defaulting to 1000 [ 58.025242][ T6312] netlink: 48 bytes leftover after parsing attributes in process `syz.0.90'. [ 58.032603][ T6312] netlink: 'syz.0.90': attribute type 64 has an invalid length. [ 58.046593][ T6314] syz.2.93 uses obsolete (PF_INET,SOCK_PACKET) [ 58.156500][ T6319] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 58.156564][ T6319] netlink: 44 bytes leftover after parsing attributes in process `syz.3.94'. [ 58.214019][ T6308] infiniband syz0: set active [ 58.214119][ T6308] infiniband syz0: added lo [ 58.226092][ T62] lo speed is unknown, defaulting to 1000 [ 58.257362][ T6308] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 58.257447][ T6308] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 58.257515][ T6308] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 58.297347][ T6323] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 58.313352][ T6333] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 58.322061][ T6308] RDS/IB: syz0: added [ 58.323642][ T6308] smc: adding ib device syz0 with port count 1 [ 58.323700][ T6308] smc: ib device syz0 port 1 has no pnetid [ 58.333731][ T6333] bond1 (unregistering): Released all slaves [ 58.352605][ T6332] netlink: 'syz.1.92': attribute type 7 has an invalid length. [ 58.360425][ T6336] netlink: 'syz.2.97': attribute type 2 has an invalid length. [ 58.379196][ T62] lo speed is unknown, defaulting to 1000 [ 58.383406][ T6323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.407674][ T6308] lo speed is unknown, defaulting to 1000 [ 58.408888][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 58.408981][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. ** replaying previous printk message ** [ 58.409153][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 58.409161][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. [ 58.415987][ T6338] nvmet: adding nsid 1 to subsystem testsubsys [ 58.418031][ T6338] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 58.430365][ T6338] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 58.433354][ T6338] CPU: 0 UID: 0 PID: 6338 Comm: syz.2.98 Not tainted syzkaller #0 PREEMPT(full) [ 58.436127][ T6338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.439991][ T6338] RIP: 0010:strlen+0x1e/0xa0 [ 58.441858][ T6338] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 58.448360][ T6338] RSP: 0018:ffffc90007f9fb48 EFLAGS: 00010296 [ 58.450493][ T6338] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90003f19000 [ 58.453851][ T6338] RDX: 0000000000000000 RSI: ffffffff8296fd7e RDI: 0000000000000000 [ 58.456416][ T6338] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 58.458896][ T6338] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 58.461455][ T6338] R13: 0000000000000000 R14: ffff88804ad51810 R15: ffff888057da6000 [ 58.464244][ T6338] FS: 00007f4c426e16c0(0000) GS:ffff8880d5b61000(0000) knlGS:0000000000000000 [ 58.467638][ T6338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.467681][ T6308] lo speed is unknown, defaulting to 1000 [ 58.471645][ T6338] CR2: 000000110c3302b8 CR3: 000000003d831000 CR4: 0000000000352ef0 [ 58.474219][ T6338] Call Trace: [ 58.475322][ T6338] [ 58.476300][ T6338] do_getname_kernel+0x26/0x250 [ 58.477946][ T6338] filp_open+0x1d/0x50 [ 58.479293][ T6338] nvmet_file_ns_enable+0x95/0x420 [ 58.481098][ T6338] nvmet_ns_enable+0x35f/0x5d0 [ 58.482966][ T6338] nvmet_ns_enable_store+0x11e/0x160 [ 58.484954][ T6338] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 58.487000][ T6338] ? configfs_write_iter+0x388/0x4e0 [ 58.488637][ T6338] configfs_write_iter+0x302/0x4e0 [ 58.490455][ T6338] vfs_write+0x6af/0x1050 [ 58.491871][ T6338] ? __pfx_configfs_write_iter+0x10/0x10 [ 58.493711][ T6338] ? __pfx_vfs_write+0x10/0x10 [ 58.495296][ T6338] ? find_held_lock+0x2b/0x80 [ 58.496892][ T6338] ksys_write+0x12a/0x250 [ 58.498429][ T6338] ? __pfx_ksys_write+0x10/0x10 [ 58.500044][ T6338] do_syscall_64+0x123/0x790 [ 58.501727][ T6338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.503679][ T6338] RIP: 0033:0x7f4c4179e159 [ 58.504308][ T6308] lo speed is unknown, defaulting to 1000 [ 58.506803][ T6338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.513561][ T6338] RSP: 002b:00007f4c426e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.516425][ T6338] RAX: ffffffffffffffda RBX: 00007f4c41a25fa0 RCX: 00007f4c4179e159 [ 58.518975][ T6338] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000005 [ 58.521487][ T6338] RBP: 00007f4c41835024 R08: 0000000000000000 R09: 0000000000000000 [ 58.523956][ T6338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.526328][ T6338] R13: 00007f4c41a26038 R14: 00007f4c41a25fa0 R15: 00007fffe5721b88 [ 58.528767][ T6338] [ 58.529942][ T6338] Modules linked in: [ 58.531942][ T6338] ---[ end trace 0000000000000000 ]--- [ ** replaying previous printk message ** [ 58.534784][ T6338] RIP: 0010:strlen+0x1e/0xa0 [ 58.534843][ T6338] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 48 89 fa 48 89 fd 53 48 c1 ea 03 48 83 ec 08 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 04 84 c0 75 50 80 7d 00 00 [ 58.534860][ T6338] RSP: 0018:ffffc90007f9fb48 EFLAGS: 00010296 [ 58.534872][ T6338] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90003f19000 [ 58.534880][ T6338] RDX: 0000000000000000 RSI: ffffffff8296fd7e RDI: 0000000000000000 [ 58.534888][ T6338] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 58.534894][ T6338] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 58.534902][ T6338] R13: 0000000000000000 R14: ffff88804ad51810 R15: ffff888057da6000 [ 58.534910][ T6338] FS: 00007f4c426e16c0(0000) GS:ffff8880d5b61000(0000) knlGS:0000000000000000 [ 58.534935][ T6338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.534946][ T6338] CR2: 00007f4c426c0d58 CR3: 000000003d831000 CR4: 0000000000352ef0 [ 58.534955][ T6338] Kernel panic - not syncing: Fatal exception [ 58.570966][ T6338] Kernel Offset: disabled [ 58.572487][ T6338] Rebooting in 86400 seconds..