last executing test programs: 20m13.141130437s ago: executing program 32 (id=224): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}], [], 0x6b}}) 20m4.907952129s ago: executing program 33 (id=276): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) (fail_nth: 2) 8m39.408324059s ago: executing program 6 (id=1707): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) ftruncate(r0, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) splice(r2, 0x0, r3, 0x0, 0x8000, 0xd) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) socket(0xb, 0x80000, 0xfffffffd) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000100)={0x34, 0x0, 0x9, 0xc, 0x0, 0x81}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 8m38.024055455s ago: executing program 6 (id=1711): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000370009182c8f185891216ff60c"], 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x240040e0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xf, &(0x7f0000000400)={0xef5f}, &(0x7f00000005c0)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) eventfd(0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYRES64=r0]) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) r2 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) lseek(r2, 0x1003ff, 0x4) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000000)={0x0, 0x3e, ""/62}) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000540)=0x2, &(0x7f0000000580)=0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e22, @multicast2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2}}, 0x10) pselect6(0x40, &(0x7f0000000080)={0x62f8, 0x2, 0x7, 0x6, 0x230599a1, 0xbebd, 0x1, 0x3}, &(0x7f0000000100)={0x4125, 0x63, 0xc, 0x1, 0x0, 0x4, 0x8, 0x4b}, &(0x7f0000000440)={0x10000000, 0x2, 0x4, 0x3, 0x8, 0x1, 0x19, 0x1}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0), 0x8}) 8m37.952556214s ago: executing program 34 (id=1711): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {}, {}, {0xfffffffc}, {0x400000}], 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000370009182c8f185891216ff60c"], 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x240040e0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xf, &(0x7f0000000400)={0xef5f}, &(0x7f00000005c0)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) eventfd(0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYRES64=r0]) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) r2 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) lseek(r2, 0x1003ff, 0x4) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000000)={0x0, 0x3e, ""/62}) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000540)=0x2, &(0x7f0000000580)=0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e22, @multicast2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2}}, 0x10) pselect6(0x40, &(0x7f0000000080)={0x62f8, 0x2, 0x7, 0x6, 0x230599a1, 0xbebd, 0x1, 0x3}, &(0x7f0000000100)={0x4125, 0x63, 0xc, 0x1, 0x0, 0x4, 0x8, 0x4b}, &(0x7f0000000440)={0x10000000, 0x2, 0x4, 0x3, 0x8, 0x1, 0x19, 0x1}, &(0x7f0000000480), &(0x7f0000000500)={&(0x7f00000004c0), 0x8}) 8m1.307173002s ago: executing program 35 (id=1763): r0 = socket$netlink(0x10, 0x3, 0xe) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x3, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x200, 0xf, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x64, 0x0, 0x9, 0x4, 0x0, @multicast2, @local}}}}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000440)={0x80, "421ae375378525f149154c9422ad0644f47d3bd7aaa45d6bb4823ab4c98100"}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 7m57.946964431s ago: executing program 1 (id=1770): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = dup2(r4, r4) sendmsg$inet6(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x18}, 0x4080) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1a717d32", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7m57.288200241s ago: executing program 1 (id=1771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x0) 7m57.043373728s ago: executing program 36 (id=1772): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="851666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) 7m56.843961065s ago: executing program 1 (id=1775): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd(0x3) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x2, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x3c}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33b}, {}, {0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) madvise(&(0x7f0000078000/0x4000)=nil, 0x4000, 0x17) syz_pidfd_open(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x840d, 0x0) 7m55.497174164s ago: executing program 1 (id=1777): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0xf) 7m55.313677183s ago: executing program 1 (id=1778): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x7be1, &(0x7f0000000080)={0x0, 0xe01, 0x13100, 0xfffffffa, 0x3c3}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x8, 0x10, r0, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f0000002480)=""/4108, 0x100c}, {&(0x7f0000000240)=""/89, 0x59}], 0x3, &(0x7f0000000580)=""/20, 0x14}, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000140)={0x7, 0x8}, 0x1) 7m53.643986799s ago: executing program 1 (id=1780): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x7) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x2003, 0x20000) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, 0x0, r3, 0xc77, 0x2, 0x7, 0x81, {0x6, 0x3, 0x180, 0x30b8, 0x359a, 0x2025, 0x0, 0x9f2, 0xd5a6, 0x3, 0xfffe, 0x2, 0x2ac, 0x7fffffff, "12d56163d7057bd2877000001fa9a58f3b702a4ccc476b1500"}}) setpgid(r0, 0x0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c59e61d4e5ee28feca9f8d3be1791f96a000010", @ANYRES16=r7], 0x30}, 0x1, 0x0, 0x0, 0x48841}, 0x4081) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) write$FUSE_ENTRY(r6, &(0x7f0000000440)={0x90}, 0x90) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2155e2a5026f3d", @ANYRESHEX=r6, @ANYBLOB=',posixacl,\x00']) fcntl$setownex(r2, 0xf, &(0x7f0000000680)={0x2}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) 7m53.356160999s ago: executing program 37 (id=1780): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x7) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x2003, 0x20000) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, 0x0, r3, 0xc77, 0x2, 0x7, 0x81, {0x6, 0x3, 0x180, 0x30b8, 0x359a, 0x2025, 0x0, 0x9f2, 0xd5a6, 0x3, 0xfffe, 0x2, 0x2ac, 0x7fffffff, "12d56163d7057bd2877000001fa9a58f3b702a4ccc476b1500"}}) setpgid(r0, 0x0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c59e61d4e5ee28feca9f8d3be1791f96a000010", @ANYRES16=r7], 0x30}, 0x1, 0x0, 0x0, 0x48841}, 0x4081) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) write$FUSE_ENTRY(r6, &(0x7f0000000440)={0x90}, 0x90) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2155e2a5026f3d", @ANYRESHEX=r6, @ANYBLOB=',posixacl,\x00']) fcntl$setownex(r2, 0xf, &(0x7f0000000680)={0x2}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) 5m10.07609846s ago: executing program 8 (id=2102): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r3, &(0x7f0000000180), 0x0, 0xa2c, 0x0, 0x0) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) close(r1) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x83, 0x2, r7}) r8 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x10001, 0x84102) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r8, 0x40045730, &(0x7f0000000400)=0x6) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r9, 0xc018620c, &(0x7f0000000380)={0x2}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000280)={0x30}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000020b01020000000001000000000000000800c07a0b72db80a33c15e93e7f0240000000050f00010019f8291729765b526d750000080003400000000008000340000000005b"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) 5m7.699239049s ago: executing program 8 (id=2110): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 5m6.30882065s ago: executing program 8 (id=2112): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) ftruncate(r0, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) splice(r2, 0x0, r3, 0x0, 0x8000, 0xd) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) socket(0xb, 0x80000, 0xfffffffd) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000100)={0x34, 0x0, 0x9, 0xc, 0x0, 0x81}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 4m59.070979679s ago: executing program 7 (id=2123): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0xf) 4m58.911470002s ago: executing program 7 (id=2124): r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x42, 0x0, 0x0, 0x10, &(0x7f0000000280), 0x0, 0x0, 0xa1, 0x8, 0x0, 0x0}}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xea60}, 0x1f, 0x8, 0x8}, 0x18) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d55549b, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0xe3, 0x400]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020300021100000000000000000000000200080010ff0000a30000000000000005000600000000000a00000000000000fc0200000000000000000000000000000000000000020001000000000000f4d1c2d6975848000900c230ff708b0000000005000500000000000a00000000000000fc010000000000000000000000000000040000000000000001000000"], 0x88}, 0x1, 0x7}, 0x24040000) 4m55.050801621s ago: executing program 8 (id=2135): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(0x0, 0xf) 4m54.545834845s ago: executing program 8 (id=2139): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020400) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) 4m53.741591827s ago: executing program 8 (id=2143): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) ftruncate(r0, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) splice(r2, 0x0, r3, 0x0, 0x8000, 0xd) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) socket(0xb, 0x80000, 0xfffffffd) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000100)={0x34, 0x0, 0x9, 0xc, 0x0, 0x81}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 4m53.384960497s ago: executing program 38 (id=2143): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) ftruncate(r0, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) splice(r2, 0x0, r3, 0x0, 0x8000, 0xd) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) socket(0xb, 0x80000, 0xfffffffd) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000100)={0x34, 0x0, 0x9, 0xc, 0x0, 0x81}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 4m53.310788392s ago: executing program 7 (id=2145): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x80000000) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x400000, 0x10100}, &(0x7f0000000200), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x0, 0x134}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x8184c, 0x0, 0x9, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x8, 0x12, "75d0f9726cc47cd5e6110d84070e0000001500"}) 4m52.188254597s ago: executing program 7 (id=2149): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(0x0, 0xf) 4m52.032000038s ago: executing program 7 (id=2150): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffff5, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000540)}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) syz_open_dev$video4linux(&(0x7f0000002580), 0x800088d, 0x2001) 4m48.856097165s ago: executing program 7 (id=2157): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mknod(0x0, 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) r2 = socket$unix(0x1, 0x1, 0x0) fcntl$getown(r1, 0x9) connect(r2, &(0x7f0000000200)=@un=@file={0x0, './file1\x00'}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x80, &(0x7f0000000280)='l7\xf7\x85\xd5@}E\xe2Dpk\xa8\x93\x1b\x8fV\xc3/%%\x80\xc6\xcfV\x14y\x88\xde\xec\xddC\x0e\xfax`\xc2\x7f_\xab\x0e\xd2\xe6\x80\xeb\xcc\a\x05\xaaeQ`y\x80\x93\xd1\xfcbN \x93\x99\xaf\xf9Se\xb6\xaa\xdc\xcd\x96r%\xe1\x83\xbb\x7fRT\xe9m>hk\xd0\x01\xc0DM\t\x8a\t{\xee\x15\xc9\x06\x80\x97M\x19@q\x8d\xfe\x0fw\x90D\x17\x06\x92\xa4\xaa#<\xb5\xc4\x0f\xec*5-\xb7\a4G\x8epY\xaf(\xd97\x06\x8ed\xf1!{\xecX\xbb \xa9\xd7\xb9\r@\x8e\x8d\xe0\xedn\xd1g') chdir(&(0x7f0000000080)='./file1\x00') 4m47.928392691s ago: executing program 39 (id=2157): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mknod(0x0, 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000002780)=""/59, 0x3b, 0xf27b) r2 = socket$unix(0x1, 0x1, 0x0) fcntl$getown(r1, 0x9) connect(r2, &(0x7f0000000200)=@un=@file={0x0, './file1\x00'}, 0x80) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x80, &(0x7f0000000280)='l7\xf7\x85\xd5@}E\xe2Dpk\xa8\x93\x1b\x8fV\xc3/%%\x80\xc6\xcfV\x14y\x88\xde\xec\xddC\x0e\xfax`\xc2\x7f_\xab\x0e\xd2\xe6\x80\xeb\xcc\a\x05\xaaeQ`y\x80\x93\xd1\xfcbN \x93\x99\xaf\xf9Se\xb6\xaa\xdc\xcd\x96r%\xe1\x83\xbb\x7fRT\xe9m>hk\xd0\x01\xc0DM\t\x8a\t{\xee\x15\xc9\x06\x80\x97M\x19@q\x8d\xfe\x0fw\x90D\x17\x06\x92\xa4\xaa#<\xb5\xc4\x0f\xec*5-\xb7\a4G\x8epY\xaf(\xd97\x06\x8ed\xf1!{\xecX\xbb \xa9\xd7\xb9\r@\x8e\x8d\xe0\xedn\xd1g') chdir(&(0x7f0000000080)='./file1\x00') 4m9.85226692s ago: executing program 9 (id=2225): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020400) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) 4m6.507781448s ago: executing program 9 (id=2231): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000440)='.\x00', 0x12000021) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="00040001f9b707178027932afb00000000000000062ec9f1014aed66e15e154752fde9b919af39d9a3fab309af9ddb2e6bde82f53e208971b027f4945fc355e83bac1439af6f1b53ba4e07424f525f453414e599867b7d1c6d9209cd2940afb72890b10f78e0a45aba6fd6c6f6d5fbd628f97700"/130], 0x18}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe) write$binfmt_elf64(r7, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfe, 0x2, 0x0, '\x00', 0x0, 0x8000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r9, 0xc008551a, &(0x7f0000001100)={0x3, 0x10, [0x0, 0x0, 0x0, 0x0]}) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 4m3.989915007s ago: executing program 9 (id=2233): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x42, 0x0, 0x0, 0x10, &(0x7f0000000280), 0x0, 0x0, 0xa1, 0x8, 0x0, 0x0}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xea60}, 0x1f, 0x8, 0x8}, 0x18) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d55549b, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0xe3, 0x400]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020300021100000000000000000000000200080010ff0000a30000000000000005000600000000000a00000000000000fc0200000000000000000000000000000000000000020001000000000000f4d1c2d6975848000900c230ff708b0000000005000500000000000a00000000000000fc010000000000000000000000000000040000000000000001000000"], 0x88}, 0x1, 0x7}, 0x24040000) 4m2.250716432s ago: executing program 6 (id=2158): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setattr(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6175746f63656c6cd9f86ee3"]) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r5) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000540)={[], [{@audit}, {@euid_lt={'euid<', r7}}, {@measure}, {@permit_directio}, {@fsname={'fsname', 0x3d, '\x00'}}], 0x2f}) 4m2.243313469s ago: executing program 9 (id=2237): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffff5, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000940)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) syz_open_dev$video4linux(&(0x7f0000002580), 0x800088d, 0x2001) 3m59.616268583s ago: executing program 6 (id=2239): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020400) pselect6(0x40, &(0x7f0000000000)={0x3a}, 0x0, 0x0, 0x0, 0x0) 3m59.610327238s ago: executing program 9 (id=2240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc063000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x83, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r8, 0x0, 0x0, 0x40, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) 3m58.03722765s ago: executing program 9 (id=2243): socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x6000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x18) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = gettid() syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xd, 0x1, 0x803}}}, 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, 0x0, 0x0) timer_delete(r7) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x22040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000000)={0xc}) ptrace$peekuser(0x3, r5, 0x2) 3m55.327959817s ago: executing program 6 (id=2253): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff2b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000000)='b', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef211591b7e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xb5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x1, @local, 0xcf}}, 0x0, 0x0, 0x6, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x30, 0x0, 0x0, 0x0, 0x128}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r4, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) recvmsg$can_raw(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)=""/176, 0xb0}], 0x1, &(0x7f0000000440)=""/97, 0x61}, 0x22) 3m50.910945186s ago: executing program 6 (id=2258): io_uring_setup(0x3846, &(0x7f0000000180)={0x0, 0x40000, 0x81, 0x6, 0xd0}) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000000040)=0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='fsi_slave_init\x00', 0xffffffffffffffff, 0x0, 0x2000fe}, 0x18) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0xfefc, 0x1}, 0xe) listen(r6, 0x9) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3m41.711941343s ago: executing program 40 (id=2243): socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x6000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x18) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = gettid() syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xd, 0x1, 0x803}}}, 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, 0x0, 0x0) timer_delete(r7) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x22040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000000)={0xc}) ptrace$peekuser(0x3, r5, 0x2) 3m34.255371449s ago: executing program 41 (id=2258): io_uring_setup(0x3846, &(0x7f0000000180)={0x0, 0x40000, 0x81, 0x6, 0xd0}) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000000040)=0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='fsi_slave_init\x00', 0xffffffffffffffff, 0x0, 0x2000fe}, 0x18) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0xfefc, 0x1}, 0xe) listen(r6, 0x9) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m2.046549172s ago: executing program 2 (id=2576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m1.167542344s ago: executing program 2 (id=2577): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = memfd_secret(0x80000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000ac0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x30011800}, 0xc, &(0x7f0000000a80)={&(0x7f00000002c0)={0x34, r1, 0x300, 0x1, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x3, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x10) socket(0x400000000010, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114200000000008510000002000000b7000000428173959500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbab7}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x3c}}, 0x4000000) 57.640599893s ago: executing program 2 (id=2588): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="020000000000000000400000", @ANYRES32, @ANYBLOB="3f9e2d5d5bd184a2db7997a03756cab5de6231df6c62d4c7fa1e1e76d54b5fa6f43cd9cc0b34178cdf39676b528bffac2dd409b60c846d13bb302d27783352a71e2129c070501d61fc8dc0657fcf08f4c33e46b897545bfdc9d99fc1c6419a7936d3f57f5d3fa00a76b1073e95c093eedf003050ece27b508e5ecc68c33d522b75559753500fd1adb6", @ANYRES64=0x0], 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a8"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1600000000000000080000000200010200eb1d6ece1182de00000000001ccfd99f8a09a98ad29c0202397720c93f5d9f30401fdece3aff", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdir(0x0, 0x4d) syz_open_dev$media(0x0, 0x7ffffffe, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240), &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r8, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r11}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, r11}, 0x38) 56.172335864s ago: executing program 2 (id=2591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 55.780345938s ago: executing program 2 (id=2594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) (fail_nth: 2) 25.638787152s ago: executing program 2 (id=2594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) (fail_nth: 2) 15.922584231s ago: executing program 5 (id=2681): io_uring_setup(0x3846, &(0x7f0000000180)={0x0, 0x40000, 0x81, 0x6, 0xd0}) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000000040)=0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='fsi_slave_init\x00', 0xffffffffffffffff, 0x0, 0x2000fe}, 0x18) listen(0xffffffffffffffff, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) 13.660073778s ago: executing program 4 (id=2685): socket(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r5, 0xff7bc437091e83af, 0x0, 0x0, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x2, r7}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='geneve0\x00', 0x10) connect$phonet_pipe(r6, &(0x7f0000000200), 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x3000c0a0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106000000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350602000fff07201706000020191800160600000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 12.971579649s ago: executing program 3 (id=2686): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r1, 0x703}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r3, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000001840)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x48}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x51, 0x3, 0x24, @empty, @empty, 0x8000, 0x80, 0x1cc, 0x4}}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000440)={0x0, @can={0x1d, r4}, @generic={0x27, "9df96d62ce3d00d69b616cf41b60"}, @qipcrtr={0x2a, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)='veth1_macvtap\x00', 0x588c, 0x8, 0x5}) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0021768238324ee0d5b18eabeda10c06e6143315"], 0x1c}}, 0x0) (async) recvmmsg(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0) 12.879660518s ago: executing program 5 (id=2687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="17000000690003"], 0x20}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e00431b2cbd70000000000007000000", @ANYRESOCT=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESHEX=r1, @ANYBLOB="cb7342f16dfd6f7ac543df9b9710e54512a2b6a7b685350cb521a33307d41e66d246a68440f3446451745bd9e16c52ffd13e3761e4ccdbea6b46473f274140b4d7712a81c05085f78dbd3e94c25ab0d8c55a191f3306032a3f345124344ada6087c1da62315f2a86"], 0x28}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket(0x25, 0x5, 0x0) connect$inet(r6, &(0x7f0000000200)={0x25, 0x4e20, @loopback}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x1, 0x101, 0x6701e32d}}, 0x28) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) 11.268272185s ago: executing program 3 (id=2689): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x34}}, 0xc000) 11.212738907s ago: executing program 5 (id=2690): r0 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_readv(r2, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f00000006c0)=""/132, 0x84}, {&(0x7f0000000780)=""/72, 0x48}], 0x5, &(0x7f0000000380)=[{&(0x7f0000000880)=""/66, 0x42}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000900)=""/180, 0xb4}, {&(0x7f0000000ac0)=""/161, 0xa1}, {&(0x7f00000009c0)=""/104, 0x68}, {0x0}, {&(0x7f0000000c00)=""/215, 0xd7}, {&(0x7f0000000140)=""/8, 0x8}], 0x8, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, &(0x7f0000000700)) 11.158672429s ago: executing program 4 (id=2691): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x20005, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='rdma']) 10.644167434s ago: executing program 3 (id=2693): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0xb3, &(0x7f0000000140)=""/179, 0x100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) shmdt(r5) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfa, "729bee", "129b1a32465f5daf7b77a1e055dd0d7bc184a65733a730d7c4655959b63929d0e95401d7c475bca09a6917672d5e9d4373615569f16fd5b58156836ea3acb5fda7aa0c4e9d4b2aa08fcd8f16e20fa7f58fb9a73c136591545474559bbbd979d8764e33c36a155a8494838195f2f45570d32211aed355c87b8e084928aabd4b47599431a58a68f88c2bdb8cbce8f875ad2edf3309d3d37c5bab659b044b2ff54e7d12412e6769b5589a38652cf6ffcdc81b91f6147c6839490607b7f02a385b3ca5ff8321725537af28056182589d7a27e0b172c2169beaa8e678e8e8310c3c350b3ee448e3dab69e6ac964d65a2ce5dcad096933ffac61ffff4e1a8bdf55962a"}}, 0x110) sendmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0) write(r0, &(0x7f00000000c0)="1780869ebe3ab666866b62437305091cbfc88b25c79f27ef660a312084e156e3f466d4e9d07290895bf9ffa77236e87006e9dae59b2f657fda59b0156b64ca994df45f428e6a921f9023cbf52ef27192a3c5918af57450e9c9e5df4e6cb8406925b6bc46befc1438295732f21a5286661d1094a855188c77bd7d744e8f7588f02bdc7064623a1800"/151, 0x9e) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x100) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000300)={0x3}, 0x4) sendto$inet(r6, &(0x7f0000000040)='\x00\x00', 0xfffffffffffffdf5, 0xc0, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) 10.006766037s ago: executing program 0 (id=2694): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000400000000000000"], 0x50) 9.412390728s ago: executing program 5 (id=2695): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000400000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x32) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r4, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="ee", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5e0b6a29899bb815c44459a35be34ddb6ef2329852c846de48a842343601", 0x1e}, {&(0x7f0000000400)}], 0x2, &(0x7f0000004a40)=ANY=[], 0x1580}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000004040)='P', 0x1}], 0x1}}], 0x3, 0x0) sendmsg$sock(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x300, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffdf}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000000050002000000000008000b40000000000900010073797a3000"], 0xd8}}, 0x20000840) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r2, @ANYRESOCT=r2], 0x50}}, 0x24008004) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000080)=@get={0x1, 0x0, 0x319c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x6, 0x0}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0x21, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}, @jmp={0x5, 0x1, 0x4, 0x7, 0x0, 0x50, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x96}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000680)='syzkaller\x00', 0x92c, 0x29, &(0x7f00000001c0)=""/41, 0x40f00, 0x78, '\x00', r7, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x101, 0x81, 0x68a}, 0x10, r8, r9, 0x5, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x3, 0x6, 0xb}, {0x2, 0x1, 0xc, 0x7}, {0x5, 0x1, 0x0, 0x2}, {0x1, 0x3, 0xe, 0x2}, {0x0, 0x3, 0xb, 0x1}], 0x10, 0x8, @void, @value}, 0x94) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000c88000/0x3000)=nil) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000) 9.312242274s ago: executing program 4 (id=2696): userfaultfd(0x801) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) socket$netlink(0x10, 0x3, 0x0) tee(0xffffffffffffffff, r1, 0xfffffffffffffc01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) fspick(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 9.269280948s ago: executing program 0 (id=2697): io_uring_setup(0x3846, &(0x7f0000000180)={0x0, 0x40000, 0x81, 0x6, 0xd0}) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000300)=""/4096, &(0x7f0000000040)=0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='fsi_slave_init\x00', 0xffffffffffffffff, 0x0, 0x2000fe}, 0x18) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r6, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) 9.267432458s ago: executing program 3 (id=2698): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setattr(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6175746f63656c6cd9f86ee3"]) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r5) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000540)={[], [{@audit}, {@euid_lt={'euid<', r7}}, {@measure}, {@permit_directio}, {@fsname={'fsname', 0x3d, '\x00'}}], 0x2f}) 8.849023827s ago: executing program 4 (id=2699): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setattr(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6175746f63656c6cd9f86ee3"]) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r5) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) mkdir(0x0, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000540)={[], [{@audit}, {@euid_lt={'euid<', r7}}, {@measure}, {@permit_directio}, {@fsname={'fsname', 0x3d, '\x00'}}], 0x2f}) 6.681987499s ago: executing program 0 (id=2700): ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x42c0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x301, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, {0x0, 0x0, 0x1}, {0x8000}, {0xf8}, {0x0, 0x1}, 0x3, 0x3f0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x2, 0xa}) 4.378244476s ago: executing program 3 (id=2701): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = epoll_create1(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x400, &(0x7f0000001080)=0x0) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x824c, r2, 0x0}]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000004c0)={0x40000000}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) fcntl$dupfd(r6, 0x0, r6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(0xffffffffffffffff) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x3a0, 0x5, 0x101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r11}, 0x38) 3.665490191s ago: executing program 4 (id=2702): creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.489539949s ago: executing program 5 (id=2703): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setattr(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6175746f63656c6cd9f86ee3"]) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r5) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) mkdir(0x0, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000540)={[], [{@audit}, {@euid_lt={'euid<', r7}}, {@measure}, {@permit_directio}, {@fsname={'fsname', 0x3d, '\x00'}}], 0x2f}) 772.192631ms ago: executing program 0 (id=2704): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c700010f5e05000003000000ff0000004a0000009cd2b5367ed6af6ef36f0563042517314b2829eff041ec92c61600d2c1f6be0a7214ca6eb229149db8ac0ef1875b1f7a39b5f6f0586f31b30de6d7fd160747cfd0c7dfc9b010340602dc39cec7aaef9f9c272d5add2524a82b5e5c76a5be20f0d40d74184748f9bdf2fb3889ff15d6176b030386b7904ebca28c097caee80b50bc9a0c6e554898686e056df29800e9373e4a5fe9a778613a8f96673891baab6b171d125b5178bffa7f8030d725e4a5e27ea69a4b02296648432e5d07"], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x301, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x800]}}) 416.930199ms ago: executing program 5 (id=2705): r0 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_readv(r2, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f00000006c0)=""/132, 0x84}, {&(0x7f0000000780)=""/72, 0x48}], 0x5, &(0x7f0000000380)=[{&(0x7f0000000880)=""/66, 0x42}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000900)=""/180, 0xb4}, {&(0x7f0000000ac0)=""/161, 0xa1}, {&(0x7f00000009c0)=""/104, 0x68}, {0x0}, {&(0x7f0000000c00)=""/215, 0xd7}, {&(0x7f0000000140)=""/8, 0x8}], 0x8, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, &(0x7f0000000700)) 415.977654ms ago: executing program 4 (id=2706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept$inet6(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 397.001914ms ago: executing program 0 (id=2707): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000400000000000000"], 0x50) 345.622704ms ago: executing program 3 (id=2708): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r4, 0x25, 0x2, @val=@perf_event={0xff}}, 0x18) syz_emit_ethernet(0x1046, &(0x7f000001a600)=ANY=[], 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="866e59208bec", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r7}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000600)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53aff", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x32, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) 0s ago: executing program 0 (id=2709): userfaultfd(0x801) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) socket$netlink(0x10, 0x3, 0x0) tee(0xffffffffffffffff, r1, 0xfffffffffffffc01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = fsopen(&(0x7f00000002c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) fspick(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) kernel console output (not intermixed with test programs): text=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1233.185939][ T29] audit: type=1400 audit(1735523777.353:45631): avc: denied { bpf } for pid=15367 comm="syz.4.2369" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1233.618328][ T5867] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1234.582125][T15388] omfs: Invalid superblock (0) [ 1234.609485][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 1234.636090][ T5867] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1234.793368][T15391] FAULT_INJECTION: forcing a failure. [ 1234.793368][T15391] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.806035][T15391] CPU: 1 UID: 0 PID: 15391 Comm: syz.0.2375 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1234.816797][T15391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1234.826855][T15391] Call Trace: [ 1234.830133][T15391] [ 1234.833064][T15391] dump_stack_lvl+0x16c/0x1f0 [ 1234.837768][T15391] should_fail_ex+0x497/0x5b0 [ 1234.842475][T15391] ? fs_reclaim_acquire+0xae/0x150 [ 1234.847602][T15391] should_failslab+0xc2/0x120 [ 1234.852466][T15391] __kmalloc_noprof+0xcb/0x510 [ 1234.857241][T15391] alloc_pipe_info+0x1ec/0x590 [ 1234.862012][T15391] splice_direct_to_actor+0x793/0xa40 [ 1234.867393][T15391] ? get_pid_task+0xfc/0x250 [ 1234.871980][T15391] ? __pfx_direct_splice_actor+0x10/0x10 [ 1234.877615][T15391] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1234.883519][T15391] ? __pfx___might_resched+0x10/0x10 [ 1234.888811][T15391] do_splice_direct+0x178/0x250 [ 1234.893677][T15391] ? __pfx_do_splice_direct+0x10/0x10 [ 1234.899057][T15391] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1234.904968][T15391] do_sendfile+0xaed/0xe30 [ 1234.909390][T15391] ? __pfx_do_sendfile+0x10/0x10 [ 1234.914328][T15391] ? __fget_files+0x206/0x3a0 [ 1234.919011][T15391] __x64_sys_sendfile64+0x1da/0x220 [ 1234.924211][T15391] ? ksys_write+0x1ba/0x250 [ 1234.928713][T15391] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1234.934445][T15391] do_syscall_64+0xcd/0x250 [ 1234.938990][T15391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.944922][T15391] RIP: 0033:0x7f9dd5b85d29 [ 1234.949349][T15391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.968975][T15391] RSP: 002b:00007f9dd69ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1234.977409][T15391] RAX: ffffffffffffffda RBX: 00007f9dd5d76160 RCX: 00007f9dd5b85d29 [ 1234.985401][T15391] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 1234.993373][T15391] RBP: 00007f9dd69ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.001343][T15391] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 1235.009324][T15391] R13: 0000000000000000 R14: 00007f9dd5d76160 R15: 00007ffc7c4c80b8 [ 1235.017325][T15391] [ 1235.118675][ T5867] usb 5-1: can't read configurations, error -61 [ 1235.319661][ T5867] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1235.483203][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 1235.569390][ T5867] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1235.589958][ T5867] usb 5-1: can't read configurations, error -61 [ 1235.641497][ T5867] usb usb5-port1: attempt power cycle [ 1236.134739][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2379'. [ 1236.612206][T15407] syzkaller0: entered promiscuous mode [ 1236.617802][T15407] syzkaller0: entered allmulticast mode [ 1236.687605][T15413] fuse: Unknown parameter '0000000000000000000400000000000000000000' [ 1237.326379][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 1237.326412][ T29] audit: type=1400 audit(1735523782.343:45854): avc: denied { perfmon } for pid=15410 comm="syz.0.2381" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1237.484126][ T29] audit: type=1400 audit(1735523782.483:45855): avc: denied { create } for pid=15408 comm="syz.2.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1237.604996][ T29] audit: type=1400 audit(1735523782.533:45856): avc: denied { perfmon } for pid=15410 comm="syz.0.2381" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1237.626447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1237.931525][ T29] audit: type=1400 audit(1735523782.533:45857): avc: denied { perfmon } for pid=15410 comm="syz.0.2381" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1238.137214][ T29] audit: type=1400 audit(1735523782.533:45858): avc: denied { bpf } for pid=15410 comm="syz.0.2381" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1238.186800][ T29] audit: type=1400 audit(1735523782.533:45859): avc: denied { bpf } for pid=15410 comm="syz.0.2381" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1238.186841][ T29] audit: type=1400 audit(1735523782.543:45860): avc: denied { prog_run } for pid=15410 comm="syz.0.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1238.186870][ T29] audit: type=1400 audit(1735523782.543:45861): avc: denied { prog_load } for pid=15410 comm="syz.0.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1238.186899][ T29] audit: type=1400 audit(1735523782.543:45862): avc: denied { bpf } for pid=15410 comm="syz.0.2381" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1238.186927][ T29] audit: type=1400 audit(1735523782.543:45863): avc: denied { perfmon } for pid=15410 comm="syz.0.2381" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1238.295102][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.476472][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.487983][T15443] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1241.371400][T15450] omfs: Invalid superblock (0) [ 1241.831127][ T5867] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1242.109441][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 1242.126211][ T5867] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1242.145456][ T5867] usb 6-1: can't read configurations, error -61 [ 1242.788690][ T5867] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1242.851249][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 1242.851269][ T29] audit: type=1400 audit(1735523787.253:46086): avc: denied { ioctl } for pid=15452 comm="syz.5.2393" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1242.882770][ T29] audit: type=1400 audit(1735523787.533:46087): avc: denied { ioctl } for pid=15459 comm="syz.2.2394" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1242.912575][ T29] audit: type=1400 audit(1735523787.833:46088): avc: denied { create } for pid=15459 comm="syz.2.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1242.938734][ T29] audit: type=1400 audit(1735523787.833:46089): avc: denied { write } for pid=15459 comm="syz.2.2394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1242.972317][ T29] audit: type=1400 audit(1735523787.843:46090): avc: denied { ioctl } for pid=15452 comm="syz.5.2393" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1242.999377][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 1243.021624][ T29] audit: type=1400 audit(1735523787.853:46091): avc: denied { ioctl } for pid=15452 comm="syz.5.2393" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1243.049659][ T29] audit: type=1400 audit(1735523787.853:46092): avc: denied { ioctl } for pid=15452 comm="syz.5.2393" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1243.054227][ T5867] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1243.074894][ T29] audit: type=1400 audit(1735523787.933:46093): avc: denied { ioctl } for pid=15452 comm="syz.5.2393" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1243.089165][ T5867] usb 6-1: can't read configurations, error -61 [ 1243.117183][ T29] audit: type=1400 audit(1735523788.023:46094): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1243.142443][ T5867] usb usb6-port1: attempt power cycle [ 1243.151687][ T29] audit: type=1400 audit(1735523788.023:46095): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1243.559485][ T5867] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1243.663507][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 1243.825618][ T5867] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1243.834259][ T5867] usb 6-1: can't read configurations, error -61 [ 1244.016689][ T5867] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1244.048605][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 1244.116480][ T5867] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1244.128745][ T5867] usb 6-1: can't read configurations, error -61 [ 1244.152538][ T5867] usb usb6-port1: unable to enumerate USB device [ 1244.851270][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1247.439392][ T5817] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1248.644770][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 1248.644788][ T29] audit: type=1400 audit(1735523793.663:46252): avc: denied { mounton } for pid=15493 comm="syz.0.2403" path="/145/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1248.674520][ C0] vkms_vblank_simulate: vblank timer overrun [ 1248.695303][ T29] audit: type=1400 audit(1735523793.713:46253): avc: denied { mount } for pid=15493 comm="syz.0.2403" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1248.770798][T15496] overlay: Unknown parameter 'audit' [ 1249.361410][ T29] audit: type=1400 audit(1735523793.783:46254): avc: denied { mounton } for pid=15493 comm="syz.0.2403" path="/145/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1249.419470][ T29] audit: type=1400 audit(1735523793.793:46255): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1249.441930][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.469360][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1249.479057][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1249.489116][ T5817] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1249.498205][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.525439][T15500] omfs: Invalid superblock (0) [ 1249.547405][ T5817] usb 5-1: config 0 descriptor?? [ 1249.565465][ T29] audit: type=1400 audit(1735523793.803:46256): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1249.588823][ C0] vkms_vblank_simulate: vblank timer overrun [ 1249.626905][T15491] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1249.680631][ T29] audit: type=1400 audit(1735523793.823:46257): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1249.795001][ T29] audit: type=1400 audit(1735523794.483:46258): avc: denied { ioctl } for pid=15489 comm="syz.4.2402" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1249.842410][ T29] audit: type=1400 audit(1735523794.483:46259): avc: denied { ioctl } for pid=15489 comm="syz.4.2402" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1250.412539][ T29] audit: type=1400 audit(1735523794.483:46260): avc: denied { ioctl } for pid=15489 comm="syz.4.2402" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1250.437634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1250.485077][ T29] audit: type=1400 audit(1735523794.483:46261): avc: denied { create } for pid=15497 comm="syz.5.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1250.505697][ C0] vkms_vblank_simulate: vblank timer overrun [ 1250.624739][ T5867] usb 5-1: USB disconnect, device number 61 [ 1251.326761][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2406'. [ 1253.303378][T15528] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1253.312031][T15528] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 1253.335286][T15511] udevd[15511]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1253.357607][T15528] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1253.389683][T15528] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 1253.651989][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 1253.652007][ T29] audit: type=1400 audit(1735523798.673:46414): avc: denied { create } for pid=15541 comm="syz.0.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1253.693661][ T29] audit: type=1400 audit(1735523798.703:46415): avc: denied { create } for pid=15541 comm="syz.0.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1253.734190][ T29] audit: type=1400 audit(1735523798.743:46416): avc: denied { read } for pid=15541 comm="syz.0.2414" name="video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1253.799441][ T29] audit: type=1400 audit(1735523798.743:46417): avc: denied { read open } for pid=15541 comm="syz.0.2414" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1253.954760][ T29] audit: type=1400 audit(1735523798.753:46418): avc: denied { execmem } for pid=15541 comm="syz.0.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1254.067290][ T29] audit: type=1400 audit(1735523799.053:46419): avc: denied { read } for pid=15549 comm="syz.4.2419" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1254.090304][ T29] audit: type=1400 audit(1735523799.063:46420): avc: denied { read open } for pid=15549 comm="syz.4.2419" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1254.114308][ T29] audit: type=1400 audit(1735523799.063:46421): avc: denied { ioctl } for pid=15549 comm="syz.4.2419" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1254.139060][ T29] audit: type=1400 audit(1735523799.083:46422): avc: denied { read } for pid=15545 comm="syz.3.2415" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1254.162116][ T29] audit: type=1400 audit(1735523799.083:46423): avc: denied { read open } for pid=15545 comm="syz.3.2415" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1254.304522][T15547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2415'. [ 1254.334286][T15547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2415'. [ 1254.929000][T15547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2415'. [ 1254.946092][T15547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2415'. [ 1256.862469][T15511] udevd[15511]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1256.921440][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2427'. [ 1257.354023][T15580] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1257.362069][T15580] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 1257.380787][T15580] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1257.401422][T15580] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 1257.473161][T15589] random: crng reseeded on system resumption [ 1258.968912][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 1258.968929][ T29] audit: type=1400 audit(1735523803.053:46601): avc: denied { prog_load } for pid=15593 comm="syz.2.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1259.753953][ T29] audit: type=1400 audit(1735523803.053:46602): avc: denied { bpf } for pid=15593 comm="syz.2.2431" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1259.851368][ T29] audit: type=1400 audit(1735523803.063:46603): avc: denied { perfmon } for pid=15593 comm="syz.2.2431" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1259.893954][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2432'. [ 1259.929510][ T29] audit: type=1400 audit(1735523803.163:46604): avc: denied { prog_load } for pid=15593 comm="syz.2.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1259.987156][ T29] audit: type=1400 audit(1735523803.163:46605): avc: denied { bpf } for pid=15593 comm="syz.2.2431" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1260.008012][ T29] audit: type=1400 audit(1735523803.173:46606): avc: denied { perfmon } for pid=15593 comm="syz.2.2431" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1260.029381][ T29] audit: type=1400 audit(1735523803.183:46607): avc: denied { perfmon } for pid=15593 comm="syz.2.2431" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1260.050602][ T29] audit: type=1400 audit(1735523803.193:46608): avc: denied { perfmon } for pid=15593 comm="syz.2.2431" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1260.071781][ T29] audit: type=1400 audit(1735523803.193:46609): avc: denied { perfmon } for pid=15593 comm="syz.2.2431" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1260.092904][ T29] audit: type=1400 audit(1735523803.203:46610): avc: denied { bpf } for pid=15593 comm="syz.2.2431" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1260.204207][T15612] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2433'. [ 1260.254126][T15612] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2433'. [ 1260.263474][T15612] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2433'. [ 1260.272807][T15612] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2433'. [ 1260.449514][ T5867] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1261.152265][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 1261.330532][ T5867] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 1261.338767][ T5867] usb 4-1: config 0 has no interface number 0 [ 1261.345072][ T5867] usb 4-1: config 0 interface 225 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1261.356126][ T5867] usb 4-1: config 0 interface 225 altsetting 0 endpoint 0x7 has an invalid bInterval 247, changing to 11 [ 1261.367588][ T5867] usb 4-1: config 0 interface 225 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1261.378737][ T5867] usb 4-1: config 0 interface 225 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1261.390592][ T5867] usb 4-1: config 0 interface 225 altsetting 0 endpoint 0x87 has invalid maxpacket 5345, setting to 1024 [ 1261.401993][ T5867] usb 4-1: config 0 interface 225 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1261.412215][ T5867] usb 4-1: config 0 interface 225 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1261.423275][ T5867] usb 4-1: config 0 interface 225 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1261.434273][ T5867] usb 4-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1261.445037][ T5867] usb 4-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1261.456039][ T5867] usb 4-1: config 0 interface 225 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1261.467125][ T5867] usb 4-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1261.477883][ T5867] usb 4-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1261.488660][ T5867] usb 4-1: config 0 interface 225 altsetting 0 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 1261.542589][ T5867] usb 4-1: New USB device found, idVendor=05d8, idProduct=810f, bcdDevice=b1.8f [ 1261.563377][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.583821][ T5867] usb 4-1: Product: syz [ 1261.588021][ T5867] usb 4-1: Manufacturer: syz [ 1261.603462][ T5867] usb 4-1: SerialNumber: syz [ 1261.640015][ T5867] usb 4-1: config 0 descriptor?? [ 1261.666096][T15605] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1262.285485][T15605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.467296][T15605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.551584][ T5867] dvb-usb: found a 'Artec T14BR DVB-T' in cold state, will try to load a firmware [ 1262.586189][ T5867] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1262.602361][ T5867] dib0700: firmware download failed at 7 with -8 [ 1262.608794][T15641] omfs: Invalid superblock (0) [ 1262.782754][ T5867] usb 4-1: USB disconnect, device number 28 [ 1263.191588][T15653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2445'. [ 1263.420003][ T5868] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1263.991767][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 1263.991786][ T29] audit: type=1400 audit(1735523809.013:46866): avc: denied { ioctl } for pid=15649 comm="syz.0.2446" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1264.079813][ T29] audit: type=1400 audit(1735523809.013:46867): avc: denied { create } for pid=15655 comm="syz.3.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1264.318938][ T29] audit: type=1400 audit(1735523809.013:46868): avc: denied { mounton } for pid=15655 comm="syz.3.2448" path="/19/file1" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1264.354598][ T29] audit: type=1400 audit(1735523809.013:46869): avc: denied { mount } for pid=15655 comm="syz.3.2448" name="/" dev="autofs" ino=54251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1264.377445][ T29] audit: type=1400 audit(1735523809.073:46870): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1264.399935][ T29] audit: type=1400 audit(1735523809.073:46871): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.421894][ T29] audit: type=1400 audit(1735523809.093:46872): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1264.444486][ T29] audit: type=1400 audit(1735523809.093:46873): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1264.468063][ T29] audit: type=1400 audit(1735523809.093:46874): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1264.491150][ T29] audit: type=1400 audit(1735523809.143:46875): avc: denied { sys_module } for pid=15651 comm="syz.2.2447" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1264.669965][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 1264.707315][ T5868] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 1264.719426][ T5868] usb 1-1: config 0 has no interface number 0 [ 1264.725702][ T5868] usb 1-1: config 0 interface 225 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1264.737177][ T5868] usb 1-1: config 0 interface 225 altsetting 0 endpoint 0x7 has an invalid bInterval 247, changing to 11 [ 1264.748543][ T5868] usb 1-1: config 0 interface 225 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1264.759675][ T5868] usb 1-1: config 0 interface 225 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1264.771466][ T5868] usb 1-1: config 0 interface 225 altsetting 0 endpoint 0x87 has invalid maxpacket 5345, setting to 1024 [ 1264.782840][ T5868] usb 1-1: config 0 interface 225 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1264.793153][ T5868] usb 1-1: config 0 interface 225 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1264.804251][ T5868] usb 1-1: config 0 interface 225 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1264.815265][ T5868] usb 1-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1264.826091][ T5868] usb 1-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1264.836903][ T5868] usb 1-1: config 0 interface 225 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1264.848019][ T5868] usb 1-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1264.858911][ T5868] usb 1-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1264.869749][ T5868] usb 1-1: config 0 interface 225 altsetting 0 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 1264.982032][ T5868] usb 1-1: New USB device found, idVendor=05d8, idProduct=810f, bcdDevice=b1.8f [ 1264.999674][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.007808][ T5868] usb 1-1: Product: syz [ 1265.012149][ T5868] usb 1-1: Manufacturer: syz [ 1265.016817][ T5868] usb 1-1: SerialNumber: syz [ 1265.078441][ T5868] usb 1-1: config 0 descriptor?? [ 1265.194346][T15650] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1265.551947][T15650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.569664][T15650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.636546][T15676] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2450'. [ 1265.653613][T15676] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2450'. [ 1265.860635][T15676] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2450'. [ 1265.873991][T15676] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2450'. [ 1265.893360][ T5868] dvb-usb: found a 'Artec T14BR DVB-T' in cold state, will try to load a firmware [ 1266.869086][ T5868] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1266.877284][ T5868] dib0700: firmware download failed at 7 with -8 [ 1266.893224][ T5868] usb 1-1: USB disconnect, device number 28 [ 1269.182263][T15682] overlay: Unknown parameter 'audit' [ 1269.550310][T15685] overlay: Unknown parameter 'audit' [ 1270.321784][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 1270.321802][ T29] audit: type=1400 audit(1735523813.993:46972): avc: denied { mounton } for pid=15675 comm="syz.4.2452" path="/564/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1270.501780][ T29] audit: type=1400 audit(1735523813.993:46973): avc: denied { mount } for pid=15675 comm="syz.4.2452" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1270.764082][ T29] audit: type=1400 audit(1735523814.203:46974): avc: denied { mounton } for pid=15675 comm="syz.4.2452" path="/564/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1271.008955][ T29] audit: type=1400 audit(1735523814.303:46975): avc: denied { mounton } for pid=15674 comm="syz.3.2453" path="/20/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1271.309401][ T29] audit: type=1400 audit(1735523814.563:46976): avc: denied { mount } for pid=15674 comm="syz.3.2453" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1271.376371][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2454'. [ 1271.459489][ T29] audit: type=1400 audit(1735523814.573:46977): avc: denied { mounton } for pid=15674 comm="syz.3.2453" path="/20/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1271.558685][ T29] audit: type=1400 audit(1735523815.333:46978): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1271.594168][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2457'. [ 1271.640421][T15694] macvtap1: entered promiscuous mode [ 1271.646803][ T29] audit: type=1400 audit(1735523815.333:46979): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1271.689681][T15694] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 1271.712705][T15694] mac80211_hwsim hwsim20 wlan1: left promiscuous mode [ 1271.738377][ T29] audit: type=1400 audit(1735523815.333:46980): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1271.787735][ T29] audit: type=1400 audit(1735523815.333:46981): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1272.062559][T15705] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1272.619885][ T51] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1272.779759][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 1272.812701][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.842727][ T51] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1272.881694][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.914789][ T51] usb 4-1: config 0 descriptor?? [ 1273.079459][ T5825] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1273.239539][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 1273.259537][T13062] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1273.328557][ T5825] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1273.356337][ T5825] usb 6-1: config 0 has no interface number 0 [ 1273.381676][ T5825] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1273.413059][ T5825] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1273.467366][ T5825] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1273.488637][T13062] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1273.507007][ T5825] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1273.521061][ T5825] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1273.533143][ T5825] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1273.545041][T13062] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1273.551837][ T5825] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1273.563687][ T5825] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1273.579179][ T5825] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1273.599866][T13062] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1273.608937][T13062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.618779][T13062] usb 1-1: Product: syz [ 1273.624899][T13062] usb 1-1: Manufacturer: syz [ 1273.633124][T13062] usb 1-1: SerialNumber: syz [ 1273.645786][ T5825] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1273.658370][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.681221][ T5825] usb 6-1: Product: syz [ 1273.685465][ T5825] usb 6-1: Manufacturer: syz [ 1273.696219][ T5825] usb 6-1: SerialNumber: syz [ 1273.710098][ T5825] usb 6-1: config 0 descriptor?? [ 1273.728810][T15707] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1273.746633][ T5825] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1273.756578][ T5825] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1273.769603][ T51] rc_core: IR keymap rc-xbox-dvd not found [ 1273.783144][ T51] Registered IR keymap rc-empty [ 1273.788613][ T51] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1273.806270][ T51] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 1273.842703][ T51] xbox_remote 4-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 1273.887679][ T51] input: failed to attach handler kbd to device input50, error: -5 [ 1273.936702][ T5175] xbox_remote 4-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 1273.940955][T13062] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1274.009839][ T51] usb 4-1: USB disconnect, device number 29 [ 1274.079627][T13062] usb 1-1: USB disconnect, device number 29 [ 1274.340851][ T9] usb 6-1: USB disconnect, device number 44 [ 1274.904651][T15738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2464'. [ 1275.369456][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 1275.369475][ T29] audit: type=1400 audit(1735523820.173:47235): avc: denied { execmem } for pid=15733 comm="syz.2.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1275.463893][T15724] udevd[15724]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1275.479926][ T29] audit: type=1400 audit(1735523820.333:47236): avc: denied { read } for pid=15733 comm="syz.2.2466" dev="nsfs" ino=4026532792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1275.549371][ T29] audit: type=1400 audit(1735523820.333:47237): avc: denied { read open } for pid=15733 comm="syz.2.2466" path="net:[4026532792]" dev="nsfs" ino=4026532792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1275.598924][ T29] audit: type=1400 audit(1735523820.343:47238): avc: denied { create } for pid=15733 comm="syz.2.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1275.639445][ T29] audit: type=1400 audit(1735523820.343:47239): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1275.671413][ T29] audit: type=1400 audit(1735523820.343:47240): avc: denied { write } for pid=15733 comm="syz.2.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1275.692149][ T29] audit: type=1400 audit(1735523820.343:47241): avc: denied { read } for pid=15733 comm="syz.2.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1275.712700][ T29] audit: type=1400 audit(1735523820.343:47242): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.734492][ T29] audit: type=1400 audit(1735523820.343:47243): avc: denied { read } for pid=15733 comm="syz.2.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1275.755032][ T29] audit: type=1400 audit(1735523820.343:47244): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1276.668610][T15607] udevd[15607]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1278.149160][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'. [ 1278.444888][ T9] IPVS: starting estimator thread 0... [ 1278.639571][T15774] IPVS: using max 34 ests per chain, 81600 per kthread [ 1279.075926][T15782] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1279.109560][T15782] UDF-fs: Scanning with blocksize 512 failed [ 1279.146427][T15782] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1279.181761][T15782] UDF-fs: Scanning with blocksize 1024 failed [ 1279.208663][T15782] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1279.273908][T15782] UDF-fs: Scanning with blocksize 2048 failed [ 1279.296443][T15782] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1279.482778][T15782] UDF-fs: Scanning with blocksize 4096 failed [ 1280.539449][ T29] kauditd_printk_skb: 2450 callbacks suppressed [ 1280.539468][ T29] audit: type=1400 audit(1735523825.173:49692): avc: denied { read write } for pid=15786 comm="syz.4.2481" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1280.578379][ T5172] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1280.629410][ T5172] audit: audit_lost=3845 audit_rate_limit=0 audit_backlog_limit=64 [ 1280.646485][ T29] audit: type=1400 audit(1735523825.183:49693): avc: denied { read open } for pid=15786 comm="syz.4.2481" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1280.670675][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.677431][ T5172] audit: backlog limit exceeded [ 1280.689637][ T5172] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1280.696159][ T5172] audit: audit_lost=3846 audit_rate_limit=0 audit_backlog_limit=64 [ 1280.739348][ T5172] audit: backlog limit exceeded [ 1280.745440][ T5172] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1280.789599][ T5172] audit: audit_lost=3847 audit_rate_limit=0 audit_backlog_limit=64 [ 1285.929359][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 1285.929375][ T29] audit: type=1400 audit(1735523830.893:50160): avc: denied { read } for pid=15857 comm="syz.4.2496" dev="nsfs" ino=4026533229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1286.069488][ T29] audit: type=1400 audit(1735523830.943:50161): avc: denied { create } for pid=15860 comm="syz.0.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1286.159385][ T29] audit: type=1400 audit(1735523830.943:50162): avc: denied { create } for pid=15860 comm="syz.0.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1286.249419][ T29] audit: type=1400 audit(1735523830.943:50163): avc: denied { create } for pid=15860 comm="syz.0.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1286.359540][ T29] audit: type=1400 audit(1735523830.953:50164): avc: denied { read } for pid=15860 comm="syz.0.2497" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1286.507215][ T29] audit: type=1400 audit(1735523830.953:50165): avc: denied { read open } for pid=15860 comm="syz.0.2497" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1286.641583][ T29] audit: type=1400 audit(1735523830.953:50166): avc: denied { ioctl } for pid=15860 comm="syz.0.2497" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1286.666276][ C0] vkms_vblank_simulate: vblank timer overrun [ 1287.029509][ T29] audit: type=1400 audit(1735523830.993:50167): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1287.093862][ T29] audit: type=1400 audit(1735523831.003:50168): avc: denied { read open } for pid=15857 comm="syz.4.2496" path="net:[4026533229]" dev="nsfs" ino=4026533229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1287.185435][ T29] audit: type=1400 audit(1735523831.013:50169): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.940099][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 1290.940115][ T29] audit: type=1400 audit(1735523835.963:50340): avc: denied { read open } for pid=15911 comm="syz.4.2511" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1291.021415][ T29] audit: type=1400 audit(1735523835.963:50341): avc: denied { read } for pid=15911 comm="syz.4.2511" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1291.093467][ T29] audit: type=1400 audit(1735523835.963:50342): avc: denied { read open } for pid=15911 comm="syz.4.2511" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1291.117767][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.149413][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1291.290490][ T29] audit: type=1400 audit(1735523835.963:50343): avc: denied { prog_load } for pid=15911 comm="syz.4.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1291.312546][ T29] audit: type=1400 audit(1735523835.963:50344): avc: denied { bpf } for pid=15911 comm="syz.4.2511" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1291.333251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.406027][ T29] audit: type=1400 audit(1735523835.963:50345): avc: denied { perfmon } for pid=15911 comm="syz.4.2511" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1293.082441][T15925] overlay: Unknown parameter 'audit' [ 1293.399696][ T9] usb 1-1: config 0 has an invalid interface number: 208 but max is 0 [ 1293.407915][ T9] usb 1-1: config 0 has no interface number 0 [ 1293.414097][ T9] usb 1-1: config 0 interface 208 altsetting 0 endpoint 0x7 has invalid maxpacket 520, setting to 64 [ 1293.425105][ T9] usb 1-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=79.28 [ 1293.434309][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.163709][ T29] audit: type=1400 audit(1735523835.993:50346): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1294.247833][ T9] usb 1-1: config 0 descriptor?? [ 1294.279398][ T29] audit: type=1400 audit(1735523835.993:50347): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1294.301073][ C0] vkms_vblank_simulate: vblank timer overrun [ 1294.332009][ T29] audit: type=1400 audit(1735523836.013:50348): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1294.354744][ T29] audit: type=1400 audit(1735523836.013:50349): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1294.414992][ T9] usb 1-1: can't set config #0, error -71 [ 1294.523806][ T9] usb 1-1: USB disconnect, device number 30 [ 1295.979425][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 1295.979443][ T29] audit: type=1400 audit(1735523840.873:50455): avc: denied { execmem } for pid=15946 comm="syz.0.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1296.616151][T15951] x_tables: duplicate underflow at hook 1 [ 1296.622082][ T29] audit: type=1400 audit(1735523841.093:50456): avc: denied { prog_load } for pid=15946 comm="syz.0.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1296.642201][ T29] audit: type=1400 audit(1735523841.103:50457): avc: denied { bpf } for pid=15946 comm="syz.0.2521" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1296.765986][ T29] audit: type=1400 audit(1735523841.103:50458): avc: denied { perfmon } for pid=15946 comm="syz.0.2521" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1296.842248][ T29] audit: type=1400 audit(1735523841.113:50459): avc: denied { perfmon } for pid=15946 comm="syz.0.2521" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1296.868848][ T29] audit: type=1400 audit(1735523841.123:50460): avc: denied { perfmon } for pid=15946 comm="syz.0.2521" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1296.942147][ T29] audit: type=1400 audit(1735523841.123:50461): avc: denied { perfmon } for pid=15946 comm="syz.0.2521" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1297.009867][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1297.037625][T15958] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1297.042658][ T29] audit: type=1400 audit(1735523841.133:50462): avc: denied { perfmon } for pid=15946 comm="syz.0.2521" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1297.045580][T15945] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1297.359432][ T9] usb 3-1: device descriptor read/64, error -71 [ 1297.541934][ T5817] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1297.699446][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 1297.759231][ T5817] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 1297.816715][ T5817] usb 4-1: config 0 has no interface number 0 [ 1297.849511][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1297.859535][ T5817] usb 4-1: config 0 interface 225 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1297.870626][ T5817] usb 4-1: config 0 interface 225 altsetting 0 endpoint 0x7 has an invalid bInterval 247, changing to 11 [ 1297.910651][ T5817] usb 4-1: config 0 interface 225 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1297.937158][ T5817] usb 4-1: config 0 interface 225 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1297.957420][ T5817] usb 4-1: config 0 interface 225 altsetting 0 endpoint 0x87 has invalid maxpacket 5345, setting to 1024 [ 1298.005749][ T9] usb 3-1: device descriptor read/64, error -71 [ 1298.029381][ T5817] usb 4-1: config 0 interface 225 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1298.065124][ T5817] usb 4-1: config 0 interface 225 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1298.087425][ T5817] usb 4-1: config 0 interface 225 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1298.112590][ T5817] usb 4-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1298.199455][ T5817] usb 4-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1298.226123][ T5817] usb 4-1: config 0 interface 225 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1298.252713][ T5817] usb 4-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1298.267792][ T5817] usb 4-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1298.278930][ T5817] usb 4-1: config 0 interface 225 altsetting 0 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 1298.309498][ T5868] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1298.344180][ T9] usb usb3-port1: attempt power cycle [ 1298.459500][ T5817] usb 4-1: New USB device found, idVendor=05d8, idProduct=810f, bcdDevice=b1.8f [ 1298.469526][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.493016][ T5817] usb 4-1: Product: syz [ 1298.497315][ T5817] usb 4-1: Manufacturer: syz [ 1298.503560][ T5817] usb 4-1: SerialNumber: syz [ 1298.516841][ T5817] usb 4-1: config 0 descriptor?? [ 1298.548255][T15963] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1298.850040][ T5868] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 1298.869432][ T5868] usb 6-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1298.882454][ T5868] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1299.011188][T15963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.017611][T15979] FAULT_INJECTION: forcing a failure. [ 1299.017611][T15979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1299.019884][T15963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.067888][ T5817] dvb-usb: found a 'Artec T14BR DVB-T' in cold state, will try to load a firmware [ 1299.082461][ T5868] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1299.091631][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.107794][ T5817] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1299.115928][ T5868] usb 6-1: Manufacturer: Ð… [ 1299.120595][ T5868] usb 6-1: SerialNumber: syz [ 1299.126744][ T5817] dib0700: firmware download failed at 7 with -8 [ 1299.139527][ T5817] usb 4-1: USB disconnect, device number 30 [ 1299.149240][T15979] CPU: 1 UID: 0 PID: 15979 Comm: syz.2.2529 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1299.160015][T15979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1299.170080][T15979] Call Trace: [ 1299.173359][T15979] [ 1299.176291][T15979] dump_stack_lvl+0x16c/0x1f0 [ 1299.180967][T15979] should_fail_ex+0x497/0x5b0 [ 1299.185637][T15979] _copy_from_user+0x2e/0xd0 [ 1299.190218][T15979] kstrtouint_from_user+0xd7/0x1c0 [ 1299.195322][T15979] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1299.201039][T15979] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1299.206667][T15979] proc_fail_nth_write+0x84/0x250 [ 1299.211699][T15979] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1299.217332][T15979] ? ksys_write+0x12b/0x250 [ 1299.221831][T15979] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1299.227456][T15979] vfs_write+0x24c/0x1150 [ 1299.231782][T15979] ? __fget_files+0x1fc/0x3a0 [ 1299.236445][T15979] ? __pfx___mutex_lock+0x10/0x10 [ 1299.241470][T15979] ? __pfx_vfs_write+0x10/0x10 [ 1299.246228][T15979] ? __fget_files+0x206/0x3a0 [ 1299.250897][T15979] ksys_write+0x12b/0x250 [ 1299.255214][T15979] ? __pfx_ksys_write+0x10/0x10 [ 1299.260056][T15979] do_syscall_64+0xcd/0x250 [ 1299.264552][T15979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.270433][T15979] RIP: 0033:0x7fc8237847df [ 1299.274835][T15979] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1299.294427][T15979] RSP: 002b:00007fc8244d7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1299.302828][T15979] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc8237847df [ 1299.310784][T15979] RDX: 0000000000000001 RSI: 00007fc8244d70a0 RDI: 0000000000000003 [ 1299.318737][T15979] RBP: 00007fc8244d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1299.326693][T15979] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1299.334648][T15979] R13: 0000000000000001 R14: 00007fc823976080 R15: 00007ffce6c8b538 [ 1299.342616][T15979] [ 1299.357191][T15972] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1299.888416][T15984] binder: 15980:15984 ioctl c0306201 0 returned -14 [ 1299.922536][T15984] binder: 15980:15984 ioctl c0306201 20000080 returned -11 [ 1300.112856][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.899395][ T5817] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1300.999103][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 1300.999142][ T29] audit: type=1400 audit(1735523846.013:50724): avc: denied { ioctl } for pid=15991 comm="syz.3.2531" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1301.031918][ T29] audit: type=1400 audit(1735523846.053:50725): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1301.032081][ T29] audit: type=1400 audit(1735523846.053:50726): avc: denied { create } for pid=15999 comm="syz.2.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1301.056304][ T29] audit: type=1400 audit(1735523846.073:50727): avc: denied { ioctl } for pid=15999 comm="syz.2.2534" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 1301.059607][ T5817] usb 4-1: device descriptor read/64, error -71 [ 1301.060064][ T29] audit: type=1400 audit(1735523846.073:50728): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1301.078895][ T29] audit: type=1400 audit(1735523846.093:50729): avc: denied { write } for pid=15999 comm="syz.2.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1301.093187][ T29] audit: type=1400 audit(1735523846.103:50730): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1301.102659][ T29] audit: type=1400 audit(1735523846.123:50731): avc: denied { create } for pid=15999 comm="syz.2.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1301.125216][ T29] audit: type=1400 audit(1735523846.143:50732): avc: denied { create } for pid=15999 comm="syz.2.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1301.129263][ T29] audit: type=1400 audit(1735523846.143:50733): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1301.712986][T16005] binder: 15988:16005 ioctl c0306201 0 returned -14 [ 1301.724980][T16005] binder: 15988:16005 ioctl c0306201 20000080 returned -11 [ 1302.179511][ T5817] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1302.285646][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.359527][ T5817] usb 4-1: device descriptor read/64, error -71 [ 1302.420993][ T5868] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1302.467067][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.538991][T16004] tty tty20: ldisc open failed (-12), clearing slot 19 [ 1302.639394][ T5817] usb usb4-port1: attempt power cycle [ 1303.005050][ T5868] usb 6-1: USB disconnect, device number 45 [ 1303.693557][ T5817] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1303.809517][ T5817] usb 4-1: device descriptor read/8, error -71 [ 1306.423617][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 1306.423633][ T29] audit: type=1400 audit(1735523851.173:50868): avc: denied { prog_load } for pid=16026 comm="syz.0.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1306.641146][ T29] audit: type=1400 audit(1735523851.183:50869): avc: denied { bpf } for pid=16026 comm="syz.0.2542" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1306.670610][ T29] audit: type=1400 audit(1735523851.183:50870): avc: denied { perfmon } for pid=16026 comm="syz.0.2542" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1306.750186][ T29] audit: type=1400 audit(1735523851.193:50871): avc: denied { perfmon } for pid=16026 comm="syz.0.2542" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1306.826849][ T29] audit: type=1400 audit(1735523851.203:50872): avc: denied { perfmon } for pid=16026 comm="syz.0.2542" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1306.848317][ T29] audit: type=1400 audit(1735523851.213:50873): avc: denied { perfmon } for pid=16026 comm="syz.0.2542" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1306.871249][ T29] audit: type=1400 audit(1735523851.213:50874): avc: denied { perfmon } for pid=16026 comm="syz.0.2542" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1306.902911][ T29] audit: type=1400 audit(1735523851.223:50875): avc: denied { bpf } for pid=16026 comm="syz.0.2542" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1306.925291][ T29] audit: type=1400 audit(1735523851.343:50876): avc: denied { prog_load } for pid=16026 comm="syz.0.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1307.099444][ T29] audit: type=1400 audit(1735523851.353:50877): avc: denied { bpf } for pid=16026 comm="syz.0.2542" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1309.843161][T16065] overlay: Unknown parameter 'audit' [ 1311.011320][T16079] ref_ctr going negative. vaddr: 0x20ffc002, curr val: -29824, delta: 1 [ 1311.027426][T16079] ref_ctr increment failed for inode: 0xc39 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801b071d40 [ 1311.198021][T15916] udevd[15916]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1311.506613][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 1311.506648][ T29] audit: type=1400 audit(1735523856.493:51032): avc: denied { create } for pid=16073 comm="syz.5.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1311.676757][T16085] vivid-001: kernel_thread() failed [ 1311.689995][ T29] audit: type=1400 audit(1735523856.513:51033): avc: denied { setopt } for pid=16073 comm="syz.5.2550" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1311.799393][ T29] audit: type=1400 audit(1735523856.523:51034): avc: denied { write } for pid=16073 comm="syz.5.2550" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1311.803264][T16083] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1311.819755][ C1] vkms_vblank_simulate: vblank timer overrun [ 1311.892668][ T29] audit: type=1400 audit(1735523856.613:51035): avc: denied { write } for pid=16076 comm="syz.3.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1311.916032][T16083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1311.943356][T16083] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1311.969428][T16083] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1312.096581][ T29] audit: type=1400 audit(1735523857.113:51036): avc: denied { prog_load } for pid=16091 comm="syz.5.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1312.116688][ T29] audit: type=1400 audit(1735523857.113:51037): avc: denied { bpf } for pid=16091 comm="syz.5.2555" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1312.137397][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.163761][ T29] audit: type=1400 audit(1735523857.113:51038): avc: denied { perfmon } for pid=16091 comm="syz.5.2555" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1312.198936][ T29] audit: type=1400 audit(1735523857.123:51039): avc: denied { perfmon } for pid=16091 comm="syz.5.2555" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1312.220015][ C1] vkms_vblank_simulate: vblank timer overrun [ 1312.255039][ T29] audit: type=1400 audit(1735523857.123:51040): avc: denied { perfmon } for pid=16091 comm="syz.5.2555" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1312.316585][ T29] audit: type=1400 audit(1735523857.123:51041): avc: denied { perfmon } for pid=16091 comm="syz.5.2555" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1312.337644][ C1] vkms_vblank_simulate: vblank timer overrun [ 1314.520002][ T5817] IPVS: starting estimator thread 0... [ 1314.659470][T16121] IPVS: using max 28 ests per chain, 67200 per kthread [ 1315.461703][ T5817] IPVS: starting estimator thread 0... [ 1315.679755][T16133] IPVS: using max 30 ests per chain, 72000 per kthread [ 1316.225232][T16144] udevd[16144]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1316.561923][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 1316.561940][ T29] audit: type=1400 audit(1735523861.583:51328): avc: denied { ioctl } for pid=16145 comm="syz.0.2571" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1316.619447][ T5825] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1316.629139][ T29] audit: type=1400 audit(1735523861.643:51329): avc: denied { ioctl } for pid=16145 comm="syz.0.2571" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1316.682912][ T29] audit: type=1400 audit(1735523861.653:51330): avc: denied { ioctl } for pid=16145 comm="syz.0.2571" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1316.733906][ T29] audit: type=1400 audit(1735523861.653:51331): avc: denied { ioctl } for pid=16145 comm="syz.0.2571" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1316.790234][ T29] audit: type=1400 audit(1735523861.663:51332): avc: denied { map_create } for pid=16152 comm="syz.2.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1316.810055][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 1316.827892][ T5825] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 1316.829621][ T29] audit: type=1400 audit(1735523861.723:51333): avc: denied { ioctl } for pid=16145 comm="syz.0.2571" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1316.854651][ T5825] usb 1-1: config 0 has no interface number 0 [ 1316.869958][ T5825] usb 1-1: config 0 interface 225 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1316.880942][ T5825] usb 1-1: config 0 interface 225 altsetting 0 endpoint 0x7 has an invalid bInterval 247, changing to 11 [ 1316.892200][ T5825] usb 1-1: config 0 interface 225 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1316.903353][ T5825] usb 1-1: config 0 interface 225 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 1316.915100][ T5825] usb 1-1: config 0 interface 225 altsetting 0 endpoint 0x87 has invalid maxpacket 5345, setting to 1024 [ 1316.926513][ T5825] usb 1-1: config 0 interface 225 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1316.936785][ T5825] usb 1-1: config 0 interface 225 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1316.937542][ T29] audit: type=1400 audit(1735523861.833:51334): avc: denied { ioctl } for pid=16145 comm="syz.0.2571" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1316.947755][ T5825] usb 1-1: config 0 interface 225 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1316.947783][ T5825] usb 1-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1316.994745][ T5825] usb 1-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1317.005525][ T5825] usb 1-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 1317.016283][ T5825] usb 1-1: config 0 interface 225 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1317.027042][ T5825] usb 1-1: config 0 interface 225 altsetting 0 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 1317.058200][ T29] audit: type=1400 audit(1735523861.833:51335): avc: denied { ioctl } for pid=16145 comm="syz.0.2571" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1317.075688][ T5825] usb 1-1: New USB device found, idVendor=05d8, idProduct=810f, bcdDevice=b1.8f [ 1317.099194][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.121109][ T29] audit: type=1400 audit(1735523861.843:51336): avc: denied { ioctl } for pid=16145 comm="syz.0.2571" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1317.215878][ T29] audit: type=1400 audit(1735523861.843:51337): avc: denied { ioctl } for pid=16145 comm="syz.0.2571" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1317.245744][ T5825] usb 1-1: Product: syz [ 1317.251774][ T5825] usb 1-1: Manufacturer: syz [ 1317.256449][ T5825] usb 1-1: SerialNumber: syz [ 1317.282674][ T5825] usb 1-1: config 0 descriptor?? [ 1317.480169][T16149] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1318.878994][T16149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.887883][T16149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.175360][ T5825] dvb-usb: found a 'Artec T14BR DVB-T' in cold state, will try to load a firmware [ 1319.259091][ T5825] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1319.313310][ T5825] dib0700: firmware download failed at 7 with -8 [ 1319.489755][ T5825] usb 1-1: USB disconnect, device number 31 [ 1319.928109][T16179] 9pnet_virtio: no channels available for device syz [ 1321.160112][T16198] omfs: Invalid superblock (0) [ 1321.299654][T16197] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1321.307344][T16197] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 1321.335826][T16197] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1321.361440][T16197] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 1321.363477][T16203] omfs: Invalid superblock (0) [ 1321.699397][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 1321.699415][ T29] audit: type=1400 audit(1735523866.433:51515): avc: denied { perfmon } for pid=16192 comm="syz.0.2582" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1321.798094][ T29] audit: type=1400 audit(1735523866.443:51516): avc: denied { perfmon } for pid=16192 comm="syz.0.2582" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1321.877615][ T29] audit: type=1400 audit(1735523866.443:51517): avc: denied { perfmon } for pid=16192 comm="syz.0.2582" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1321.947096][ T29] audit: type=1400 audit(1735523866.443:51518): avc: denied { perfmon } for pid=16192 comm="syz.0.2582" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1322.041963][ T29] audit: type=1400 audit(1735523866.443:51519): avc: denied { bpf } for pid=16192 comm="syz.0.2582" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1322.134338][ T29] audit: type=1400 audit(1735523866.443:51520): avc: denied { bpf } for pid=16192 comm="syz.0.2582" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1322.182914][ T29] audit: type=1400 audit(1735523866.483:51521): avc: denied { prog_run } for pid=16192 comm="syz.0.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1322.258362][ T29] audit: type=1400 audit(1735523866.513:51522): avc: denied { read } for pid=16196 comm="syz.3.2584" dev="nsfs" ino=4026533373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1322.346774][ T29] audit: type=1400 audit(1735523866.513:51523): avc: denied { read open } for pid=16196 comm="syz.3.2584" path="net:[4026533373]" dev="nsfs" ino=4026533373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1322.508018][ T29] audit: type=1400 audit(1735523866.513:51524): avc: denied { create } for pid=16196 comm="syz.3.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1323.087694][T16226] fuse: Bad value for 'user_id' [ 1323.115588][T16226] fuse: Bad value for 'user_id' [ 1324.251656][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.883158][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.078531][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.122270][T16249] omfs: Invalid superblock (0) [ 1325.210659][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.496104][T13973] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1325.506852][T13973] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1325.528370][T13973] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1325.535694][ T62] bridge_slave_1: left allmulticast mode [ 1325.541617][ T62] bridge_slave_1: left promiscuous mode [ 1325.547373][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.557469][T13973] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1325.580544][T13973] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1325.593272][T13973] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1325.607376][ T62] bridge_slave_0: left allmulticast mode [ 1325.613183][ T62] bridge_slave_0: left promiscuous mode [ 1325.618846][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.632291][T13919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1325.640540][T13919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1325.667056][T13919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1325.675696][T13919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1325.689567][T13919] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1325.700352][T13919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1326.716085][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 1326.716101][ T29] audit: type=1400 audit(1735523871.733:51731): avc: denied { create } for pid=16262 comm="syz.0.2597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1326.768272][ T29] audit: type=1400 audit(1735523871.763:51732): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1326.841003][T16267] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1326.848878][T16267] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 1326.859503][T16267] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1326.881359][T16267] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 1326.898305][ T29] audit: type=1400 audit(1735523871.773:51733): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1326.940527][ T29] audit: type=1400 audit(1735523871.773:51734): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1326.966948][ T29] audit: type=1400 audit(1735523871.773:51735): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1327.010586][ T29] audit: type=1400 audit(1735523871.773:51736): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1327.039545][ T29] audit: type=1400 audit(1735523871.853:51737): avc: denied { mounton } for pid=16262 comm="syz.0.2597" path="/184" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1327.084481][ T29] audit: type=1400 audit(1735523871.873:51738): avc: denied { read } for pid=16269 comm="syz.5.2598" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1327.137175][ T29] audit: type=1400 audit(1735523871.873:51739): avc: denied { read open } for pid=16269 comm="syz.5.2598" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1327.198110][ T29] audit: type=1400 audit(1735523871.893:51740): avc: denied { read } for pid=16269 comm="syz.5.2598" dev="nsfs" ino=4026533169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1327.781106][T13919] Bluetooth: hci5: command tx timeout [ 1327.845665][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.862115][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.880062][ T62] bond0 (unregistering): Released all slaves [ 1327.979837][ T51] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1328.156885][ T51] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1328.179563][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1328.199359][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1328.219342][ T51] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1328.249385][ T51] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1328.258452][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.290130][ T51] usb 4-1: config 0 descriptor?? [ 1329.300343][T16277] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1329.736408][ T51] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1329.744125][ T51] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1329.781310][ T51] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1329.788735][ T51] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1329.872369][T13919] Bluetooth: hci5: command tx timeout [ 1329.872680][T16290] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1329.886518][ T51] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1329.894179][ T51] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1329.894318][ T62] hsr_slave_0: left promiscuous mode [ 1329.907048][ T51] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1329.914638][ T51] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 1329.922860][ T51] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 1329.939122][T16290] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1329.948542][T16290] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1330.008965][ T51] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1330.389674][ T62] hsr_slave_1: left promiscuous mode [ 1330.391648][ T51] usb 4-1: USB disconnect, device number 35 [ 1330.443459][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.451903][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.504378][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.512119][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.671560][ T62] veth1_macvtap: left promiscuous mode [ 1330.677170][ T62] veth0_macvtap: left promiscuous mode [ 1330.703879][ T62] veth1_vlan: left promiscuous mode [ 1330.729648][ T62] veth0_vlan: left promiscuous mode [ 1332.090580][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 1332.090616][ T29] audit: type=1400 audit(1735523876.623:51873): avc: denied { create } for pid=16308 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1332.129269][ T29] audit: type=1400 audit(1735523876.643:51874): avc: denied { write } for pid=16308 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1332.150262][ T29] audit: type=1400 audit(1735523876.683:51875): avc: denied { create } for pid=16308 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1332.171117][ T29] audit: type=1400 audit(1735523876.703:51876): avc: denied { create } for pid=16308 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1332.191774][ T29] audit: type=1400 audit(1735523876.713:51877): avc: denied { write } for pid=16308 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1332.212351][ T29] audit: type=1400 audit(1735523876.713:51878): avc: denied { read } for pid=16308 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1332.232823][ T29] audit: type=1400 audit(1735523876.723:51879): avc: denied { read } for pid=16308 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1332.253292][ T29] audit: type=1400 audit(1735523876.793:51880): avc: denied { write } for pid=16308 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1332.258602][T13919] Bluetooth: hci5: command tx timeout [ 1332.273855][ T29] audit: type=1400 audit(1735523876.813:51881): avc: denied { create } for pid=16308 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1332.273887][ T29] audit: type=1400 audit(1735523876.853:51882): avc: denied { setopt } for pid=16308 comm="syz.3.2609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1332.592338][T16316] binder: Unknown parameter 'è^–å00000000000000000010000' [ 1332.665926][T16316] netlink: 1272 bytes leftover after parsing attributes in process `syz.4.2607'. [ 1332.689585][T16316] openvswitch: netlink: Flow actions attr not present in new flow. [ 1332.854780][T16323] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1332.897200][T16323] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 1332.909204][T16323] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1332.927077][T16323] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 1332.954561][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1333.041674][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1333.099475][T16322] 9pnet_fd: Insufficient options for proto=fd [ 1333.349359][ T9] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1333.499401][ T9] usb 6-1: device descriptor read/64, error -71 [ 1333.588917][T16254] chnl_net:caif_netlink_parms(): no params data found [ 1333.615896][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2613'. [ 1333.749568][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1333.804991][T16254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.874389][T16254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.903295][T16254] bridge_slave_0: entered allmulticast mode [ 1333.912103][T16254] bridge_slave_0: entered promiscuous mode [ 1333.928773][T16254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.963519][T16254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.989700][ T9] usb 6-1: device descriptor read/64, error -71 [ 1333.996181][T16254] bridge_slave_1: entered allmulticast mode [ 1334.005564][T16254] bridge_slave_1: entered promiscuous mode [ 1334.015366][T16337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2614'. [ 1334.159838][ T9] usb usb6-port1: attempt power cycle [ 1334.231927][T16337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2614'. [ 1334.329505][T13919] Bluetooth: hci5: command tx timeout [ 1334.355163][T16337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2614'. [ 1334.493587][T16337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2614'. [ 1334.519547][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1334.566912][T16254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.583218][T16254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.590197][ T62] IPVS: stop unused estimator thread 0... [ 1334.608287][ T9] usb 6-1: device descriptor read/8, error -71 [ 1334.668731][T16254] team0: Port device team_slave_0 added [ 1334.785318][T16254] team0: Port device team_slave_1 added [ 1334.855549][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1335.044881][ T9] usb 6-1: device descriptor read/8, error -71 [ 1335.130122][T16254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.137955][T16254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.159544][ T9] usb usb6-port1: unable to enumerate USB device [ 1335.163841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1335.186177][T16254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.237759][T16254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.245790][T16254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.277932][T16254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.565223][T16254] hsr_slave_0: entered promiscuous mode [ 1335.871259][T16349] overlay: Unknown parameter 'audit' [ 1336.034379][T16254] hsr_slave_1: entered promiscuous mode [ 1336.112717][T16254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1336.277007][T16254] Cannot create hsr debugfs directory [ 1337.657541][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 1337.657561][ T29] audit: type=1400 audit(1735523881.853:52075): avc: denied { read write } for pid=16348 comm="syz.4.2618" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1338.299383][ T29] audit: type=1400 audit(1735523881.853:52076): avc: denied { read write open } for pid=16348 comm="syz.4.2618" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1338.743383][T16354] overlay: Unknown parameter 'audit' [ 1339.690111][ T29] audit: type=1400 audit(1735523881.953:52077): avc: denied { mounton } for pid=16348 comm="syz.4.2618" path="/598/file0" dev="tmpfs" ino=3198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1339.930752][ T29] audit: type=1400 audit(1735523881.953:52078): avc: denied { mount } for pid=16348 comm="syz.4.2618" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1340.036541][ T29] audit: type=1400 audit(1735523883.703:52079): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1340.253987][ T29] audit: type=1400 audit(1735523883.703:52080): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1340.343366][ T29] audit: type=1400 audit(1735523883.703:52081): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1340.365951][ T29] audit: type=1400 audit(1735523883.703:52082): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1340.405801][ T29] audit: type=1400 audit(1735523883.703:52083): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1340.449667][ T29] audit: type=1400 audit(1735523883.753:52084): avc: denied { mounton } for pid=16348 comm="syz.4.2618" path="/598/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1340.489940][ T51] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1341.116874][ T51] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1341.128633][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1341.152216][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1341.163593][ T51] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1341.176706][ T51] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1341.185888][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.216525][ T51] usb 6-1: config 0 descriptor?? [ 1341.259025][T16359] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1342.405329][ T51] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1342.413001][ T51] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1342.451112][ T51] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1342.468859][ T51] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1342.502789][ T51] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1342.520009][ T51] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1342.527616][ T51] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1342.545871][ T51] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1342.567317][ T51] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 1342.618538][ T51] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1342.624040][T16254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1342.673051][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 1342.673066][ T29] audit: type=1400 audit(1735523887.693:52184): avc: denied { ioctl } for pid=16358 comm="syz.5.2619" path="/dev/usb/hiddev0" dev="devtmpfs" ino=3346 ioctlcmd=0x4813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1342.678377][ T51] usb 6-1: USB disconnect, device number 50 [ 1342.715952][ T29] audit: type=1400 audit(1735523887.693:52185): avc: denied { mount } for pid=16374 comm="syz.4.2624" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1342.755604][T16254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1342.815698][T16254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1342.866217][T16254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1342.896606][ T29] audit: type=1400 audit(1735523887.913:52186): avc: denied { create } for pid=16254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1342.946975][ T29] audit: type=1400 audit(1735523887.933:52187): avc: denied { write } for pid=16254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1343.000541][ T29] audit: type=1400 audit(1735523887.943:52188): avc: denied { read } for pid=16254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1343.029138][ T29] audit: type=1400 audit(1735523887.943:52189): avc: denied { read } for pid=16254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1343.058674][ T29] audit: type=1400 audit(1735523887.943:52190): avc: denied { write } for pid=16254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1343.105382][ T29] audit: type=1400 audit(1735523887.953:52191): avc: denied { read } for pid=16254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1343.137127][ T29] audit: type=1400 audit(1735523887.953:52192): avc: denied { write } for pid=16254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1343.166673][ T29] audit: type=1400 audit(1735523887.963:52193): avc: denied { read } for pid=16254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1343.432059][T16254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1343.910863][T16254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1343.940792][T12147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.947957][T12147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1344.120600][T12147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.127722][T12147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1344.421661][T16393] fuse: Bad value for 'user_id' [ 1344.444841][T16390] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1344.446890][T16393] fuse: Bad value for 'user_id' [ 1344.466518][T16390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1345.373167][T16401] vivid-001: kernel_thread() failed [ 1346.201703][T16407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2631'. [ 1346.229862][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2631'. [ 1346.278327][T16407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2631'. [ 1346.301025][T16407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2631'. [ 1347.059451][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2635'. [ 1347.751339][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 1347.751376][ T29] audit: type=1400 audit(1735523892.753:52355): avc: denied { ioctl } for pid=16423 comm="syz.0.2636" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1348.160064][T14487] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1348.163090][ T29] audit: type=1400 audit(1735523892.853:52356): avc: denied { prog_load } for pid=16425 comm="syz.3.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1348.187626][ T29] audit: type=1400 audit(1735523892.863:52357): avc: denied { bpf } for pid=16425 comm="syz.3.2638" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1348.208476][ T29] audit: type=1400 audit(1735523892.863:52358): avc: denied { perfmon } for pid=16425 comm="syz.3.2638" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1348.229639][ T29] audit: type=1400 audit(1735523892.873:52359): avc: denied { perfmon } for pid=16425 comm="syz.3.2638" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1348.250757][ T29] audit: type=1400 audit(1735523892.883:52360): avc: denied { perfmon } for pid=16425 comm="syz.3.2638" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1348.271813][ T29] audit: type=1400 audit(1735523892.893:52361): avc: denied { perfmon } for pid=16425 comm="syz.3.2638" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1348.292901][ T29] audit: type=1400 audit(1735523892.893:52362): avc: denied { perfmon } for pid=16425 comm="syz.3.2638" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1348.314018][ T29] audit: type=1400 audit(1735523892.903:52363): avc: denied { bpf } for pid=16425 comm="syz.3.2638" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1348.333516][T14487] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1348.334907][ T29] audit: type=1400 audit(1735523892.933:52364): avc: denied { prog_load } for pid=16425 comm="syz.3.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1348.364371][T14487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1348.407955][T14487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1348.441153][T14487] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1348.468615][T14487] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1348.486301][T14487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.642466][T14487] usb 1-1: config 0 descriptor?? [ 1348.665069][T16426] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1348.958704][T16254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1349.125046][T14487] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1349.132931][T14487] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1349.149469][T14487] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1349.172551][T14487] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1349.196728][T14487] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1349.227418][T14487] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1349.246464][T14487] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1349.264403][T14487] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1349.283980][T14487] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 1349.316238][T16254] veth0_vlan: entered promiscuous mode [ 1349.353822][T14487] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1349.403371][T16254] veth1_vlan: entered promiscuous mode [ 1349.411142][T14487] usb 1-1: USB disconnect, device number 32 [ 1349.673908][T16254] veth0_macvtap: entered promiscuous mode [ 1349.743476][T16254] veth1_macvtap: entered promiscuous mode [ 1349.860329][T16254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1349.897793][T16254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.930464][T16254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1349.977526][T16254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.016338][T16254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1350.052892][T16254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.079578][T16254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1350.109678][T16254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.140294][T16254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1350.203895][T16254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1350.244063][T16254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.275875][T16254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1350.303223][T16254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.333436][T16254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1350.379584][T16254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.399341][T16254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1350.419781][T16254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1350.447856][T16254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1350.475772][T16254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.826612][T16254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.890215][T16254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.014367][T16254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.041484][T16467] xt_HMARK: proto mask must be zero with L3 mode [ 1352.167833][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.208893][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.414028][T12110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.422234][T12110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.903865][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 1352.903907][ T29] audit: type=1400 audit(1735523897.633:52536): avc: denied { write } for pid=16451 comm="syz.0.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1352.963143][ T29] audit: type=1400 audit(1735523897.633:52537): avc: denied { read } for pid=16451 comm="syz.0.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1352.983895][ T29] audit: type=1400 audit(1735523897.633:52538): avc: denied { read } for pid=16451 comm="syz.0.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1353.004472][ T29] audit: type=1400 audit(1735523897.643:52539): avc: denied { write } for pid=16451 comm="syz.0.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1353.025177][ T29] audit: type=1400 audit(1735523897.643:52540): avc: denied { mounton } for pid=16254 comm="syz-executor" path="/root/syzkaller.ysbN8M/syz-tmp/newroot/proc" dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1353.051421][ T29] audit: type=1400 audit(1735523897.723:52541): avc: denied { create } for pid=16469 comm="syz.3.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1353.072191][ T29] audit: type=1400 audit(1735523897.763:52542): avc: denied { mount } for pid=16254 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1353.094404][ T29] audit: type=1400 audit(1735523897.773:52543): avc: denied { write } for pid=16469 comm="syz.3.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1353.115096][ T29] audit: type=1400 audit(1735523897.833:52544): avc: denied { read } for pid=16469 comm="syz.3.2648" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1353.139019][ T29] audit: type=1400 audit(1735523897.843:52545): avc: denied { read open } for pid=16469 comm="syz.3.2648" path="/dev/sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1354.006250][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'. [ 1354.545365][ T6081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.000389][ T6081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.518324][ T6081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.745864][ T6081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.385216][T13973] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1356.610424][T13973] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1356.628281][ T6081] bridge_slave_1: left allmulticast mode [ 1356.634256][T13973] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1356.648923][T13973] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1356.738243][ T6081] bridge_slave_1: left promiscuous mode [ 1356.749216][T13973] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1356.756719][T13973] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1356.811483][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.939866][ T6081] bridge_slave_0: left allmulticast mode [ 1356.945629][ T6081] bridge_slave_0: left promiscuous mode [ 1356.955967][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.203805][T16527] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1357.211537][T16527] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 1357.219866][T16527] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1357.227532][T16527] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 1357.552585][T16533] overlayfs: missing 'lowerdir' [ 1357.970661][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 1357.970680][ T29] audit: type=1400 audit(1735523902.883:52743): avc: denied { execmem } for pid=16535 comm="syz.4.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1358.029470][ T29] audit: type=1400 audit(1735523902.973:52744): avc: denied { create } for pid=16537 comm="syz.0.2664" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1358.054593][ T29] audit: type=1400 audit(1735523902.983:52745): avc: denied { create } for pid=16537 comm="syz.0.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1358.332604][ T29] audit: type=1400 audit(1735523903.033:52746): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1358.711266][ T29] audit: type=1400 audit(1735523903.033:52747): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1358.849421][T13919] Bluetooth: hci5: command tx timeout [ 1358.985634][ T29] audit: type=1400 audit(1735523903.033:52748): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1359.082664][ T29] audit: type=1400 audit(1735523903.043:52749): avc: denied { read } for pid=16537 comm="syz.0.2664" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 1359.113307][ T29] audit: type=1400 audit(1735523903.043:52750): avc: denied { read open } for pid=16537 comm="syz.0.2664" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 1359.139642][ T29] audit: type=1400 audit(1735523903.043:52751): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1359.163954][ T29] audit: type=1400 audit(1735523903.043:52752): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1359.197688][ T6081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.223522][ T6081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.234168][ T6081] bond0 (unregistering): Released all slaves [ 1360.101675][ T6081] hsr_slave_0: left promiscuous mode [ 1360.175816][ T6081] hsr_slave_1: left promiscuous mode [ 1360.189488][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.216313][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.283087][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.313898][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.352998][ T6081] veth1_macvtap: left promiscuous mode [ 1360.358520][ T6081] veth0_macvtap: left promiscuous mode [ 1360.385353][ T6081] veth1_vlan: left promiscuous mode [ 1360.402048][ T6081] veth0_vlan: left promiscuous mode [ 1360.990275][T13919] Bluetooth: hci5: command tx timeout [ 1361.292304][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.822209][T16576] Bluetooth: MGMT ver 1.23 [ 1362.980484][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 1362.980504][ T29] audit: type=1400 audit(1735523907.993:52908): avc: denied { mounton } for pid=16582 comm="syz.5.2676" path="/75/bus" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1363.029478][ T29] audit: type=1400 audit(1735523908.033:52909): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1363.051669][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.060593][T13919] Bluetooth: hci5: command tx timeout [ 1363.066490][ T29] audit: type=1400 audit(1735523908.043:52910): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1363.091444][ T29] audit: type=1400 audit(1735523908.043:52911): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1363.127604][ T6081] team0 (unregistering): Port device team_slave_1 removed [ 1363.128543][ T29] audit: type=1400 audit(1735523908.043:52912): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1363.194264][ T6081] team0 (unregistering): Port device team_slave_0 removed [ 1363.202270][ T29] audit: type=1400 audit(1735523908.043:52913): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1363.715523][T16579] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1363.737373][T16576] : entered promiscuous mode [ 1363.923840][ T29] audit: type=1400 audit(1735523908.913:52914): avc: denied { module_request } for pid=16511 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1364.019469][ T29] audit: type=1400 audit(1735523908.963:52915): avc: denied { map_create } for pid=16590 comm="syz.4.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1364.085596][ T29] audit: type=1400 audit(1735523908.993:52916): avc: denied { prog_load } for pid=16590 comm="syz.4.2678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1364.132993][ T29] audit: type=1400 audit(1735523908.993:52917): avc: denied { bpf } for pid=16590 comm="syz.4.2678" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1364.153729][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.677366][T13919] Bluetooth: hci5: command tx timeout [ 1365.696676][T16511] chnl_net:caif_netlink_parms(): no params data found [ 1365.699906][ T5825] IPVS: starting estimator thread 0... [ 1365.890674][T16603] IPVS: using max 30 ests per chain, 72000 per kthread [ 1367.000928][T16511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.037869][T16511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.063555][T16511] bridge_slave_0: entered allmulticast mode [ 1367.070456][T16511] bridge_slave_0: entered promiscuous mode [ 1367.080945][T16511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.088058][T16511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.095387][T16511] bridge_slave_1: entered allmulticast mode [ 1367.102301][T16511] bridge_slave_1: entered promiscuous mode [ 1368.332546][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 1368.332565][ T29] audit: type=1400 audit(1735523912.903:53044): avc: denied { create } for pid=16631 comm="syz.5.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1368.362752][ T29] audit: type=1400 audit(1735523912.943:53045): avc: denied { create } for pid=16631 comm="syz.5.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1368.437986][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2687'. [ 1368.492553][ T29] audit: type=1400 audit(1735523912.983:53046): avc: denied { connect } for pid=16631 comm="syz.5.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1368.536626][T16511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.658925][T16511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.842573][ T29] audit: type=1400 audit(1735523913.003:53047): avc: denied { bind } for pid=16631 comm="syz.5.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1368.862329][ T29] audit: type=1400 audit(1735523913.093:53048): avc: denied { read write } for pid=16631 comm="syz.5.2687" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1368.885974][ T29] audit: type=1400 audit(1735523913.103:53049): avc: denied { read write open } for pid=16631 comm="syz.5.2687" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1368.910617][ T29] audit: type=1400 audit(1735523913.153:53050): avc: denied { mounton } for pid=16631 comm="syz.5.2687" path="/77/file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1368.933513][ T29] audit: type=1400 audit(1735523913.183:53051): avc: denied { mount } for pid=16631 comm="syz.5.2687" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1368.956598][ T29] audit: type=1400 audit(1735523913.433:53052): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1368.978841][ T29] audit: type=1400 audit(1735523913.433:53053): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1369.153145][T16511] team0: Port device team_slave_0 added [ 1369.171050][T16511] team0: Port device team_slave_1 added [ 1369.285390][T16511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.320755][T16511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.354024][T16511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.411164][T16511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.437715][T16651] udevd[16651]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1369.447806][T16511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.554287][T16511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.699399][T16511] hsr_slave_0: entered promiscuous mode [ 1369.976968][T16511] hsr_slave_1: entered promiscuous mode [ 1370.560246][T16511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1370.567929][T16511] Cannot create hsr debugfs directory [ 1372.152707][T16674] overlay: Unknown parameter 'audit' [ 1372.396878][T16678] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2695'. [ 1373.389540][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 1373.389559][ T29] audit: type=1400 audit(1735523918.373:53206): avc: denied { execmem } for pid=16682 comm="syz.4.2699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1373.463973][ T29] audit: type=1400 audit(1735523918.453:53207): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1373.536421][ T29] audit: type=1400 audit(1735523918.463:53208): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1373.566936][ T29] audit: type=1400 audit(1735523918.463:53209): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1374.275986][ T29] audit: type=1400 audit(1735523918.463:53210): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1374.299516][ T29] audit: type=1400 audit(1735523918.463:53211): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=14 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1374.571086][ T29] audit: type=1400 audit(1735523918.913:53212): avc: denied { read write } for pid=16682 comm="syz.4.2699" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1375.699945][T16686] overlay: Unknown parameter 'audit' [ 1376.193329][ T29] audit: type=1400 audit(1735523918.913:53213): avc: denied { read write open } for pid=16682 comm="syz.4.2699" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1376.279390][ T29] audit: type=1400 audit(1735523919.013:53214): avc: denied { mounton } for pid=16682 comm="syz.4.2699" path="/624/file0" dev="tmpfs" ino=3338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1376.359502][ T29] audit: type=1400 audit(1735523919.013:53215): avc: denied { mount } for pid=16682 comm="syz.4.2699" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1376.797528][T16511] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1377.904074][T16511] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1378.572242][T16698] overlay: Unknown parameter 'audit' [ 1378.809420][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 1378.809438][ T29] audit: type=1400 audit(1735523923.493:53287): avc: denied { map_create } for pid=16692 comm="syz.3.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1379.157939][T16511] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1379.215324][ T29] audit: type=1400 audit(1735523923.493:53288): avc: denied { mounton } for pid=16693 comm="syz.5.2703" path="/80/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1379.254238][T16511] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1379.331028][ T29] audit: type=1400 audit(1735523923.493:53289): avc: denied { map_read map_write } for pid=16692 comm="syz.3.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1379.443188][ T29] audit: type=1400 audit(1735523923.493:53290): avc: denied { mount } for pid=16693 comm="syz.5.2703" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1379.548242][ T29] audit: type=1400 audit(1735523923.593:53291): avc: denied { mounton } for pid=16693 comm="syz.5.2703" path="/80/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1379.602120][ T29] audit: type=1400 audit(1735523924.203:53292): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1379.624190][ C1] vkms_vblank_simulate: vblank timer overrun [ 1379.689495][ T29] audit: type=1400 audit(1735523924.203:53293): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1379.769656][ T29] audit: type=1400 audit(1735523924.203:53294): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1379.849903][ T29] audit: type=1400 audit(1735523924.203:53295): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1379.916319][ T29] audit: type=1400 audit(1735523924.203:53296): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1380.024600][T16716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2706'. [ 1380.038071][T16511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.064156][T16716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2706'. [ 1380.092896][T16716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2706'. [ 1380.129441][T16716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2706'. [ 1380.160939][T16511] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.200379][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.207483][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.244898][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.252039][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.283384][T16717] BUG: Bad page state in process syz.3.2708 pfn:64d62 [ 1380.290855][T16717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888064d62ee0 pfn:0x64d62 [ 1380.300981][T16717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1380.308107][T16717] raw: 00fff00000000000 dead000000000040 ffff88801b790000 0000000000000000 [ 1380.316729][T16717] raw: ffff888064d62ee0 3ffffffffffffffd 00000000ffffffff 0000000000000000 [ 1380.325349][T16717] page dumped because: page_pool leak [ 1380.330744][T16717] page_owner tracks the page as allocated [ 1380.336497][T16717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9520, tgid 9487 (syz.5.907), ts 494049871858, free_ts 494049148166 [ 1380.353463][T16717] post_alloc_hook+0x2d1/0x350 [ 1380.358243][T16717] get_page_from_freelist+0xfce/0x2f80 [ 1380.363745][T16717] __alloc_pages_noprof+0x223/0x25b0 [ 1380.369046][T16717] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 1380.374622][T16717] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1380.380544][T16717] page_pool_alloc_netmem+0xc4/0x160 [ 1380.385834][T16717] page_pool_alloc_frag_netmem+0x220/0x760 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1380.391687][T16717] page_pool_alloc_frag+0x2c/0x80 [ 1380.396725][T16717] skb_pp_cow_data+0x238/0xe80 [ 1380.401527][T16717] skb_cow_data_for_xdp+0x88/0xb0 [ 1380.406560][T16717] do_xdp_generic+0x3f1/0xe70 [ 1380.411274][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1380.418053][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1380.423906][T16717] __netif_receive_skb+0x1d/0x160 [ 1380.428949][T16717] netif_receive_skb+0x13f/0x7b0 [ 1380.433933][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1380.439230][T16717] page last free pid 5814 tgid 5814 stack trace: [ 1380.445597][T16717] free_unref_page+0x661/0x1080 [ 1380.450480][T16717] vfree+0x174/0x950 [ 1380.454378][T16717] __do_replace+0x7d4/0x9e0 [ 1380.458888][T16717] do_ip6t_set_ctl+0x965/0xbf0 [ 1380.463691][T16717] nf_setsockopt+0x8a/0xf0 [ 1380.468117][T16717] ipv6_setsockopt+0x135/0x170 [ 1380.472909][T16717] tcp_setsockopt+0xa4/0x100 [ 1380.477504][T16717] do_sock_setsockopt+0x222/0x480 [ 1380.482566][T16717] __sys_setsockopt+0x1a0/0x230 [ 1380.487432][T16717] __x64_sys_setsockopt+0xbd/0x160 [ 1380.492586][T16717] do_syscall_64+0xcd/0x250 [ 1380.497105][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.503051][T16717] Modules linked in: [ 1380.506950][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.3.2708 Not tainted 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1380.517716][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1380.527783][T16717] Call Trace: [ 1380.531063][T16717] [ 1380.534000][T16717] dump_stack_lvl+0x16c/0x1f0 [ 1380.538691][T16717] bad_page+0xb3/0x1f0 [ 1380.542780][T16717] ? __pfx_bad_page+0x10/0x10 [ 1380.547473][T16717] ? page_bad_reason+0x9d/0x1e0 [ 1380.552336][T16717] free_unref_page+0x72f/0x1080 [ 1380.557220][T16717] page_frag_free+0x255/0x2a0 [ 1380.561907][T16717] __xdp_return+0x217/0xa90 [ 1380.566420][T16717] bpf_xdp_adjust_tail+0xa78/0x1080 [ 1380.571640][T16717] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 1380.577097][T16717] bpf_prog_run_generic_xdp+0x630/0x1510 [ 1380.582751][T16717] do_xdp_generic+0x70a/0xe70 [ 1380.587448][T16717] ? __pfx_do_xdp_generic+0x10/0x10 [ 1380.592670][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1380.597877][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1380.602834][T16717] ? mark_lock+0xb5/0xc60 [ 1380.607174][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1380.613968][T16717] ? hlock_class+0x4e/0x130 [ 1380.618493][T16717] ? __lock_acquire+0x15a9/0x3c40 [ 1380.623532][T16717] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1380.630659][T16717] ? hlock_class+0x4e/0x130 [ 1380.635173][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1380.640135][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1380.645341][T16717] ? find_held_lock+0x2d/0x110 [ 1380.650124][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1380.655939][T16717] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1380.662363][T16717] ? rcu_is_watching+0x12/0xc0 [ 1380.667138][T16717] ? ktime_get_with_offset+0x273/0x3a0 [ 1380.672603][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 1380.677819][T16717] ? netif_receive_skb+0x109/0x7b0 [ 1380.682944][T16717] __netif_receive_skb+0x1d/0x160 [ 1380.687977][T16717] netif_receive_skb+0x13f/0x7b0 [ 1380.692924][T16717] ? __pfx_netif_receive_skb+0x10/0x10 [ 1380.698388][T16717] ? _copy_from_iter+0x15e/0x1560 [ 1380.703423][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1380.708622][T16717] ? __pfx__copy_from_iter+0x10/0x10 [ 1380.713935][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1380.719233][T16717] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1380.725058][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1380.729921][T16717] ? lock_acquire+0x2f/0xb0 [ 1380.734427][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1380.739284][T16717] tun_get_user+0x2a22/0x3e50 [ 1380.743972][T16717] ? in_gate_area+0xf0/0x100 [ 1380.748571][T16717] ? __pfx_tun_get_user+0x10/0x10 [ 1380.753606][T16717] ? find_held_lock+0x2d/0x110 [ 1380.758389][T16717] ? __pfx_lock_release+0x10/0x10 [ 1380.763437][T16717] tun_chr_write_iter+0xdc/0x210 [ 1380.768386][T16717] vfs_write+0x5ae/0x1150 [ 1380.772730][T16717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1380.778296][T16717] ? __pfx_vfs_write+0x10/0x10 [ 1380.783061][T16717] ? do_futex+0x123/0x350 [ 1380.787396][T16717] ? __fget_files+0x40/0x3a0 [ 1380.792009][T16717] ksys_write+0x12b/0x250 [ 1380.796340][T16717] ? __pfx_ksys_write+0x10/0x10 [ 1380.801209][T16717] do_syscall_64+0xcd/0x250 [ 1380.805722][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.811629][T16717] RIP: 0033:0x7fd9829847df [ 1380.816054][T16717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1380.835673][T16717] RSP: 002b:00007fd983853000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1380.844095][T16717] RAX: ffffffffffffffda RBX: 00007fd982b75fa0 RCX: 00007fd9829847df [ 1380.852072][T16717] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 00000000000000c8 [ 1380.860048][T16717] RBP: 00007fd982a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1380.868032][T16717] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1380.876007][T16717] R13: 0000000000000000 R14: 00007fd982b75fa0 R15: 00007ffd3da396e8 [ 1380.884002][T16717] [ 1380.887100][T16717] Disabling lock debugging due to kernel taint [ 1380.893268][T16717] BUG: Bad page state in process syz.3.2708 pfn:34b6f [ 1380.900120][T16717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034b6f000 pfn:0x34b6f [ 1380.910194][T16717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1380.917304][T16717] raw: 00fff00000000000 dead000000000040 ffff88801b790000 0000000000000000 [ 1380.925909][T16717] raw: ffff888034b6f000 0000000000000001 00000000ffffffff 0000000000000000 [ 1380.934502][T16717] page dumped because: page_pool leak [ 1380.939881][T16717] page_owner tracks the page as allocated [ 1380.945588][T16717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 16717, tgid 16714 (syz.3.2708), ts 1380283315062, free_ts 1379262958069 [ 1380.962956][T16717] post_alloc_hook+0x2d1/0x350 [ 1380.967693][T16717] get_page_from_freelist+0xfce/0x2f80 [ 1380.973153][T16717] __alloc_pages_noprof+0x223/0x25b0 [ 1380.978442][T16717] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 1380.983995][T16717] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1380.989889][T16717] page_pool_alloc_netmem+0xc4/0x160 [ 1380.995160][T16717] page_pool_alloc_pages+0x1a/0x60 [ 1381.000268][T16717] skb_pp_cow_data+0x72f/0xe80 [ 1381.005024][T16717] skb_cow_data_for_xdp+0x88/0xb0 [ 1381.010061][T16717] do_xdp_generic+0x3f1/0xe70 [ 1381.014734][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1381.021507][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1381.027310][T16717] __netif_receive_skb+0x1d/0x160 [ 1381.032353][T16717] netif_receive_skb+0x13f/0x7b0 [ 1381.037309][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1381.042607][T16717] tun_get_user+0x2a22/0x3e50 [ 1381.047283][T16717] page last free pid 5825 tgid 5825 stack trace: [ 1381.053631][T16717] free_unref_page+0x661/0x1080 [ 1381.058478][T16717] vfree+0x174/0x950 [ 1381.062381][T16717] bpf_prog_free_deferred+0x53f/0x6f0 [ 1381.067752][T16717] process_one_work+0x9c5/0x1ba0 [ 1381.072699][T16717] worker_thread+0x6c8/0xf00 [ 1381.077280][T16717] kthread+0x2c1/0x3a0 [ 1381.081349][T16717] ret_from_fork+0x45/0x80 [ 1381.085753][T16717] ret_from_fork_asm+0x1a/0x30 [ 1381.090521][T16717] Modules linked in: [ 1381.094403][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.3.2708 Tainted: G B 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1381.106615][T16717] Tainted: [B]=BAD_PAGE [ 1381.110743][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1381.120777][T16717] Call Trace: [ 1381.124034][T16717] [ 1381.126942][T16717] dump_stack_lvl+0x16c/0x1f0 [ 1381.131608][T16717] bad_page+0xb3/0x1f0 [ 1381.135652][T16717] ? __pfx_bad_page+0x10/0x10 [ 1381.140305][T16717] ? page_bad_reason+0x9d/0x1e0 [ 1381.145130][T16717] free_unref_page+0x72f/0x1080 [ 1381.149968][T16717] page_frag_free+0x255/0x2a0 [ 1381.154638][T16717] __xdp_return+0x217/0xa90 [ 1381.159116][T16717] bpf_xdp_adjust_tail+0xa78/0x1080 [ 1381.164294][T16717] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 1381.169723][T16717] bpf_prog_run_generic_xdp+0x630/0x1510 [ 1381.175337][T16717] do_xdp_generic+0x70a/0xe70 [ 1381.179991][T16717] ? __pfx_do_xdp_generic+0x10/0x10 [ 1381.185163][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1381.190333][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1381.195247][T16717] ? mark_lock+0xb5/0xc60 [ 1381.199559][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1381.206315][T16717] ? hlock_class+0x4e/0x130 [ 1381.210792][T16717] ? __lock_acquire+0x15a9/0x3c40 [ 1381.215786][T16717] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1381.222866][T16717] ? hlock_class+0x4e/0x130 [ 1381.227343][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1381.232251][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1381.237420][T16717] ? find_held_lock+0x2d/0x110 [ 1381.242157][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1381.247936][T16717] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1381.254324][T16717] ? rcu_is_watching+0x12/0xc0 [ 1381.259062][T16717] ? ktime_get_with_offset+0x273/0x3a0 [ 1381.264521][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 1381.269692][T16717] ? netif_receive_skb+0x109/0x7b0 [ 1381.274782][T16717] __netif_receive_skb+0x1d/0x160 [ 1381.279784][T16717] netif_receive_skb+0x13f/0x7b0 [ 1381.284694][T16717] ? __pfx_netif_receive_skb+0x10/0x10 [ 1381.290134][T16717] ? _copy_from_iter+0x15e/0x1560 [ 1381.295138][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1381.300318][T16717] ? __pfx__copy_from_iter+0x10/0x10 [ 1381.305604][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1381.310864][T16717] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1381.316656][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1381.321478][T16717] ? lock_acquire+0x2f/0xb0 [ 1381.325951][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1381.330778][T16717] tun_get_user+0x2a22/0x3e50 [ 1381.335428][T16717] ? in_gate_area+0xf0/0x100 [ 1381.339999][T16717] ? __pfx_tun_get_user+0x10/0x10 [ 1381.344998][T16717] ? find_held_lock+0x2d/0x110 [ 1381.349746][T16717] ? __pfx_lock_release+0x10/0x10 [ 1381.354765][T16717] tun_chr_write_iter+0xdc/0x210 [ 1381.359679][T16717] vfs_write+0x5ae/0x1150 [ 1381.363978][T16717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1381.369496][T16717] ? __pfx_vfs_write+0x10/0x10 [ 1381.374240][T16717] ? do_futex+0x123/0x350 [ 1381.378540][T16717] ? __fget_files+0x40/0x3a0 [ 1381.383105][T16717] ksys_write+0x12b/0x250 [ 1381.387403][T16717] ? __pfx_ksys_write+0x10/0x10 [ 1381.392226][T16717] do_syscall_64+0xcd/0x250 [ 1381.396703][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.402582][T16717] RIP: 0033:0x7fd9829847df [ 1381.406969][T16717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1381.426550][T16717] RSP: 002b:00007fd983853000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1381.434931][T16717] RAX: ffffffffffffffda RBX: 00007fd982b75fa0 RCX: 00007fd9829847df [ 1381.442884][T16717] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 00000000000000c8 [ 1381.450836][T16717] RBP: 00007fd982a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1381.458786][T16717] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1381.466733][T16717] R13: 0000000000000000 R14: 00007fd982b75fa0 R15: 00007ffd3da396e8 [ 1381.474689][T16717] [ 1381.477749][T16717] BUG: Bad page state in process syz.3.2708 pfn:59a19 [ 1381.484628][T16717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888059a19fc0 pfn:0x59a19 [ 1381.494712][T16717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1381.501850][T16717] raw: 00fff00000000000 dead000000000040 ffff88801b790000 0000000000000000 [ 1381.510561][T16717] raw: ffff888059a19fc0 0000000000000001 00000000ffffffff 0000000000000000 [ 1381.519136][T16717] page dumped because: page_pool leak [ 1381.524507][T16717] page_owner tracks the page as allocated [ 1381.530241][T16717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 16717, tgid 16714 (syz.3.2708), ts 1380283307045, free_ts 1379262997491 [ 1381.547619][T16717] post_alloc_hook+0x2d1/0x350 [ 1381.552384][T16717] get_page_from_freelist+0xfce/0x2f80 [ 1381.557847][T16717] __alloc_pages_noprof+0x223/0x25b0 [ 1381.563137][T16717] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 1381.568672][T16717] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1381.574563][T16717] page_pool_alloc_netmem+0xc4/0x160 [ 1381.579862][T16717] page_pool_alloc_pages+0x1a/0x60 [ 1381.584960][T16717] skb_pp_cow_data+0x72f/0xe80 [ 1381.589723][T16717] skb_cow_data_for_xdp+0x88/0xb0 [ 1381.594742][T16717] do_xdp_generic+0x3f1/0xe70 [ 1381.599430][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1381.606187][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1381.611995][T16717] __netif_receive_skb+0x1d/0x160 [ 1381.617012][T16717] netif_receive_skb+0x13f/0x7b0 [ 1381.621947][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1381.627223][T16717] tun_get_user+0x2a22/0x3e50 [ 1381.631898][T16717] page last free pid 5825 tgid 5825 stack trace: [ 1381.638206][T16717] free_unref_page+0x661/0x1080 [ 1381.643056][T16717] vfree+0x174/0x950 [ 1381.646939][T16717] delayed_vfree_work+0x56/0x70 [ 1381.651806][T16717] process_one_work+0x9c5/0x1ba0 [ 1381.656732][T16717] worker_thread+0x6c8/0xf00 [ 1381.661337][T16717] kthread+0x2c1/0x3a0 [ 1381.665400][T16717] ret_from_fork+0x45/0x80 [ 1381.669818][T16717] ret_from_fork_asm+0x1a/0x30 [ 1381.674577][T16717] Modules linked in: [ 1381.678444][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.3.2708 Tainted: G B 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1381.690649][T16717] Tainted: [B]=BAD_PAGE [ 1381.694770][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1381.704795][T16717] Call Trace: [ 1381.708045][T16717] [ 1381.710947][T16717] dump_stack_lvl+0x16c/0x1f0 [ 1381.715600][T16717] bad_page+0xb3/0x1f0 [ 1381.719643][T16717] ? __pfx_bad_page+0x10/0x10 [ 1381.724293][T16717] ? page_bad_reason+0x9d/0x1e0 [ 1381.729113][T16717] free_unref_page+0x72f/0x1080 [ 1381.733936][T16717] page_frag_free+0x255/0x2a0 [ 1381.739254][T16717] __xdp_return+0x217/0xa90 [ 1381.743737][T16717] bpf_xdp_adjust_tail+0xa78/0x1080 [ 1381.748914][T16717] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 1381.754340][T16717] bpf_prog_run_generic_xdp+0x630/0x1510 [ 1381.759946][T16717] do_xdp_generic+0x70a/0xe70 [ 1381.764596][T16717] ? __pfx_do_xdp_generic+0x10/0x10 [ 1381.769769][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1381.774935][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1381.779860][T16717] ? mark_lock+0xb5/0xc60 [ 1381.784178][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1381.790916][T16717] ? hlock_class+0x4e/0x130 [ 1381.795391][T16717] ? __lock_acquire+0x15a9/0x3c40 [ 1381.800386][T16717] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1381.807466][T16717] ? hlock_class+0x4e/0x130 [ 1381.811953][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1381.816861][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1381.822028][T16717] ? find_held_lock+0x2d/0x110 [ 1381.826780][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1381.832560][T16717] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1381.839524][T16717] ? rcu_is_watching+0x12/0xc0 [ 1381.844350][T16717] ? ktime_get_with_offset+0x273/0x3a0 [ 1381.849776][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 1381.854945][T16717] ? netif_receive_skb+0x109/0x7b0 [ 1381.860030][T16717] __netif_receive_skb+0x1d/0x160 [ 1381.865027][T16717] netif_receive_skb+0x13f/0x7b0 [ 1381.869936][T16717] ? __pfx_netif_receive_skb+0x10/0x10 [ 1381.875364][T16717] ? _copy_from_iter+0x15e/0x1560 [ 1381.880372][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1381.885557][T16717] ? __pfx__copy_from_iter+0x10/0x10 [ 1381.890821][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1381.896078][T16717] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1381.901867][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1381.906688][T16717] ? lock_acquire+0x2f/0xb0 [ 1381.911161][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1381.915986][T16717] tun_get_user+0x2a22/0x3e50 [ 1381.920637][T16717] ? in_gate_area+0xf0/0x100 [ 1381.925195][T16717] ? __pfx_tun_get_user+0x10/0x10 [ 1381.930202][T16717] ? find_held_lock+0x2d/0x110 [ 1381.934964][T16717] ? __pfx_lock_release+0x10/0x10 [ 1381.939965][T16717] tun_chr_write_iter+0xdc/0x210 [ 1381.944877][T16717] vfs_write+0x5ae/0x1150 [ 1381.949176][T16717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1381.954696][T16717] ? __pfx_vfs_write+0x10/0x10 [ 1381.959429][T16717] ? do_futex+0x123/0x350 [ 1381.963729][T16717] ? __fget_files+0x40/0x3a0 [ 1381.968296][T16717] ksys_write+0x12b/0x250 [ 1381.972596][T16717] ? __pfx_ksys_write+0x10/0x10 [ 1381.977415][T16717] do_syscall_64+0xcd/0x250 [ 1381.981894][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.987765][T16717] RIP: 0033:0x7fd9829847df [ 1381.992164][T16717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1382.011740][T16717] RSP: 002b:00007fd983853000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1382.020125][T16717] RAX: ffffffffffffffda RBX: 00007fd982b75fa0 RCX: 00007fd9829847df [ 1382.028065][T16717] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 00000000000000c8 [ 1382.036013][T16717] RBP: 00007fd982a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1382.043964][T16717] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1382.051906][T16717] R13: 0000000000000000 R14: 00007fd982b75fa0 R15: 00007ffd3da396e8 [ 1382.059855][T16717] [ 1382.062896][T16717] BUG: Bad page state in process syz.3.2708 pfn:3016c [ 1382.069754][T16717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803016c960 pfn:0x3016c [ 1382.079835][T16717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1382.086948][T16717] raw: 00fff00000000000 dead000000000040 ffff88801b790000 0000000000000000 [ 1382.095547][T16717] raw: ffff88803016c960 0000000000000001 00000000ffffffff 0000000000000000 [ 1382.104137][T16717] page dumped because: page_pool leak [ 1382.109507][T16717] page_owner tracks the page as allocated [ 1382.115204][T16717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 16717, tgid 16714 (syz.3.2708), ts 1380283298813, free_ts 1379263004388 [ 1382.132586][T16717] post_alloc_hook+0x2d1/0x350 [ 1382.137358][T16717] get_page_from_freelist+0xfce/0x2f80 [ 1382.142846][T16717] __alloc_pages_noprof+0x223/0x25b0 [ 1382.148139][T16717] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 1382.153689][T16717] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1382.159596][T16717] page_pool_alloc_netmem+0xc4/0x160 [ 1382.164871][T16717] page_pool_alloc_pages+0x1a/0x60 [ 1382.169977][T16717] skb_pp_cow_data+0x72f/0xe80 [ 1382.174731][T16717] skb_cow_data_for_xdp+0x88/0xb0 [ 1382.179770][T16717] do_xdp_generic+0x3f1/0xe70 [ 1382.184454][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1382.191227][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1382.197025][T16717] __netif_receive_skb+0x1d/0x160 [ 1382.202046][T16717] netif_receive_skb+0x13f/0x7b0 [ 1382.206975][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1382.212255][T16717] tun_get_user+0x2a22/0x3e50 [ 1382.216926][T16717] page last free pid 5825 tgid 5825 stack trace: [ 1382.223241][T16717] free_unref_page+0x661/0x1080 [ 1382.228082][T16717] vfree+0x174/0x950 [ 1382.231969][T16717] delayed_vfree_work+0x56/0x70 [ 1382.236806][T16717] process_one_work+0x9c5/0x1ba0 [ 1382.241744][T16717] worker_thread+0x6c8/0xf00 [ 1382.246327][T16717] kthread+0x2c1/0x3a0 [ 1382.250396][T16717] ret_from_fork+0x45/0x80 [ 1382.254801][T16717] ret_from_fork_asm+0x1a/0x30 [ 1382.259564][T16717] Modules linked in: [ 1382.263448][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.3.2708 Tainted: G B 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1382.275656][T16717] Tainted: [B]=BAD_PAGE [ 1382.279782][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1382.289824][T16717] Call Trace: [ 1382.293075][T16717] [ 1382.295980][T16717] dump_stack_lvl+0x16c/0x1f0 [ 1382.300635][T16717] bad_page+0xb3/0x1f0 [ 1382.304679][T16717] ? __pfx_bad_page+0x10/0x10 [ 1382.309329][T16717] ? page_bad_reason+0x9d/0x1e0 [ 1382.314152][T16717] free_unref_page+0x72f/0x1080 [ 1382.318974][T16717] page_frag_free+0x255/0x2a0 [ 1382.323637][T16717] __xdp_return+0x217/0xa90 [ 1382.328113][T16717] bpf_xdp_adjust_tail+0xa78/0x1080 [ 1382.333285][T16717] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 1382.338720][T16717] bpf_prog_run_generic_xdp+0x630/0x1510 [ 1382.344329][T16717] do_xdp_generic+0x70a/0xe70 [ 1382.348979][T16717] ? __pfx_do_xdp_generic+0x10/0x10 [ 1382.354150][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1382.359320][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1382.364227][T16717] ? mark_lock+0xb5/0xc60 [ 1382.368525][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1382.375264][T16717] ? hlock_class+0x4e/0x130 [ 1382.379746][T16717] ? __lock_acquire+0x15a9/0x3c40 [ 1382.384743][T16717] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1382.391837][T16717] ? hlock_class+0x4e/0x130 [ 1382.396312][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1382.401220][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1382.406398][T16717] ? find_held_lock+0x2d/0x110 [ 1382.411137][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1382.416913][T16717] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1382.423299][T16717] ? rcu_is_watching+0x12/0xc0 [ 1382.428036][T16717] ? ktime_get_with_offset+0x273/0x3a0 [ 1382.433463][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 1382.438634][T16717] ? netif_receive_skb+0x109/0x7b0 [ 1382.443719][T16717] __netif_receive_skb+0x1d/0x160 [ 1382.448714][T16717] netif_receive_skb+0x13f/0x7b0 [ 1382.453622][T16717] ? __pfx_netif_receive_skb+0x10/0x10 [ 1382.459053][T16717] ? _copy_from_iter+0x15e/0x1560 [ 1382.464061][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1382.469227][T16717] ? __pfx__copy_from_iter+0x10/0x10 [ 1382.474486][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1382.479747][T16717] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1382.485529][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1382.490353][T16717] ? lock_acquire+0x2f/0xb0 [ 1382.494824][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1382.499646][T16717] tun_get_user+0x2a22/0x3e50 [ 1382.504295][T16717] ? in_gate_area+0xf0/0x100 [ 1382.508852][T16717] ? __pfx_tun_get_user+0x10/0x10 [ 1382.513848][T16717] ? find_held_lock+0x2d/0x110 [ 1382.518586][T16717] ? __pfx_lock_release+0x10/0x10 [ 1382.523591][T16717] tun_chr_write_iter+0xdc/0x210 [ 1382.528502][T16717] vfs_write+0x5ae/0x1150 [ 1382.532800][T16717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1382.538318][T16717] ? __pfx_vfs_write+0x10/0x10 [ 1382.543051][T16717] ? do_futex+0x123/0x350 [ 1382.547349][T16717] ? __fget_files+0x40/0x3a0 [ 1382.551910][T16717] ksys_write+0x12b/0x250 [ 1382.556218][T16717] ? __pfx_ksys_write+0x10/0x10 [ 1382.561038][T16717] do_syscall_64+0xcd/0x250 [ 1382.565514][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.571381][T16717] RIP: 0033:0x7fd9829847df [ 1382.575769][T16717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1382.595347][T16717] RSP: 002b:00007fd983853000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1382.603728][T16717] RAX: ffffffffffffffda RBX: 00007fd982b75fa0 RCX: 00007fd9829847df [ 1382.611675][T16717] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 00000000000000c8 [ 1382.619633][T16717] RBP: 00007fd982a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1382.627591][T16717] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1382.635544][T16717] R13: 0000000000000000 R14: 00007fd982b75fa0 R15: 00007ffd3da396e8 [ 1382.643490][T16717] [ 1382.646525][T16717] BUG: Bad page state in process syz.3.2708 pfn:3524b [ 1382.653379][T16717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803524bdc0 pfn:0x3524b [ 1382.663461][T16717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1382.670582][T16717] raw: 00fff00000000000 dead000000000040 ffff88801b790000 0000000000000000 [ 1382.679160][T16717] raw: ffff88803524bdc0 0000000000000001 00000000ffffffff 0000000000000000 [ 1382.687865][T16717] page dumped because: page_pool leak [ 1382.693239][T16717] page_owner tracks the page as allocated [ 1382.698946][T16717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 16717, tgid 16714 (syz.3.2708), ts 1380283290998, free_ts 1379263011429 [ 1382.716304][T16717] post_alloc_hook+0x2d1/0x350 [ 1382.721085][T16717] get_page_from_freelist+0xfce/0x2f80 [ 1382.726523][T16717] __alloc_pages_noprof+0x223/0x25b0 [ 1382.731802][T16717] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 1382.737339][T16717] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1382.743227][T16717] page_pool_alloc_netmem+0xc4/0x160 [ 1382.748513][T16717] page_pool_alloc_pages+0x1a/0x60 [ 1382.753618][T16717] skb_pp_cow_data+0x72f/0xe80 [ 1382.758381][T16717] skb_cow_data_for_xdp+0x88/0xb0 [ 1382.763411][T16717] do_xdp_generic+0x3f1/0xe70 [ 1382.768079][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1382.774847][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1382.780660][T16717] __netif_receive_skb+0x1d/0x160 [ 1382.785659][T16717] netif_receive_skb+0x13f/0x7b0 [ 1382.790607][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1382.795909][T16717] tun_get_user+0x2a22/0x3e50 [ 1382.800620][T16717] page last free pid 5825 tgid 5825 stack trace: [ 1382.806942][T16717] free_unref_page+0x661/0x1080 [ 1382.811823][T16717] vfree+0x174/0x950 [ 1382.815712][T16717] delayed_vfree_work+0x56/0x70 [ 1382.820570][T16717] process_one_work+0x9c5/0x1ba0 [ 1382.825510][T16717] worker_thread+0x6c8/0xf00 [ 1382.830119][T16717] kthread+0x2c1/0x3a0 [ 1382.834185][T16717] ret_from_fork+0x45/0x80 [ 1382.838577][T16717] ret_from_fork_asm+0x1a/0x30 [ 1382.843352][T16717] Modules linked in: [ 1382.847241][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.3.2708 Tainted: G B 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1382.859449][T16717] Tainted: [B]=BAD_PAGE [ 1382.863585][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1382.873616][T16717] Call Trace: [ 1382.876870][T16717] [ 1382.879776][T16717] dump_stack_lvl+0x16c/0x1f0 [ 1382.884437][T16717] bad_page+0xb3/0x1f0 [ 1382.888479][T16717] ? __pfx_bad_page+0x10/0x10 [ 1382.893129][T16717] ? page_bad_reason+0x9d/0x1e0 [ 1382.897953][T16717] free_unref_page+0x72f/0x1080 [ 1382.902787][T16717] page_frag_free+0x255/0x2a0 [ 1382.907451][T16717] __xdp_return+0x217/0xa90 [ 1382.911937][T16717] bpf_xdp_adjust_tail+0xa78/0x1080 [ 1382.917123][T16717] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 1382.922559][T16717] bpf_prog_run_generic_xdp+0x630/0x1510 [ 1382.928181][T16717] do_xdp_generic+0x70a/0xe70 [ 1382.932842][T16717] ? __pfx_do_xdp_generic+0x10/0x10 [ 1382.938028][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1382.943206][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1382.948126][T16717] ? mark_lock+0xb5/0xc60 [ 1382.952444][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1382.959196][T16717] ? hlock_class+0x4e/0x130 [ 1382.963685][T16717] ? __lock_acquire+0x15a9/0x3c40 [ 1382.968691][T16717] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1382.975783][T16717] ? hlock_class+0x4e/0x130 [ 1382.980359][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1382.985280][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1382.990460][T16717] ? find_held_lock+0x2d/0x110 [ 1382.995211][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1383.001001][T16717] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1383.007398][T16717] ? rcu_is_watching+0x12/0xc0 [ 1383.012150][T16717] ? ktime_get_with_offset+0x273/0x3a0 [ 1383.017594][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 1383.022778][T16717] ? netif_receive_skb+0x109/0x7b0 [ 1383.027877][T16717] __netif_receive_skb+0x1d/0x160 [ 1383.032888][T16717] netif_receive_skb+0x13f/0x7b0 [ 1383.037810][T16717] ? __pfx_netif_receive_skb+0x10/0x10 [ 1383.043252][T16717] ? _copy_from_iter+0x15e/0x1560 [ 1383.048263][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1383.053440][T16717] ? __pfx__copy_from_iter+0x10/0x10 [ 1383.058712][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1383.063994][T16717] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1383.069795][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1383.074635][T16717] ? lock_acquire+0x2f/0xb0 [ 1383.079122][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1383.083967][T16717] tun_get_user+0x2a22/0x3e50 [ 1383.088639][T16717] ? in_gate_area+0xf0/0x100 [ 1383.093214][T16717] ? __pfx_tun_get_user+0x10/0x10 [ 1383.098230][T16717] ? find_held_lock+0x2d/0x110 [ 1383.102987][T16717] ? __pfx_lock_release+0x10/0x10 [ 1383.108007][T16717] tun_chr_write_iter+0xdc/0x210 [ 1383.112937][T16717] vfs_write+0x5ae/0x1150 [ 1383.117248][T16717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1383.122786][T16717] ? __pfx_vfs_write+0x10/0x10 [ 1383.127529][T16717] ? do_futex+0x123/0x350 [ 1383.131840][T16717] ? __fget_files+0x40/0x3a0 [ 1383.136415][T16717] ksys_write+0x12b/0x250 [ 1383.140728][T16717] ? __pfx_ksys_write+0x10/0x10 [ 1383.145561][T16717] do_syscall_64+0xcd/0x250 [ 1383.150053][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.155932][T16717] RIP: 0033:0x7fd9829847df [ 1383.160329][T16717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1383.179923][T16717] RSP: 002b:00007fd983853000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1383.188316][T16717] RAX: ffffffffffffffda RBX: 00007fd982b75fa0 RCX: 00007fd9829847df [ 1383.196268][T16717] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 00000000000000c8 [ 1383.204217][T16717] RBP: 00007fd982a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1383.212168][T16717] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1383.220120][T16717] R13: 0000000000000000 R14: 00007fd982b75fa0 R15: 00007ffd3da396e8 [ 1383.228078][T16717] [ 1383.231136][T16717] BUG: Bad page state in process syz.3.2708 pfn:30218 [ 1383.237976][T16717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030218f50 pfn:0x30218 [ 1383.248169][T16717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1383.255303][T16717] raw: 00fff00000000000 dead000000000040 ffff88801b790000 0000000000000000 [ 1383.263900][T16717] raw: ffff888030218f50 0000000000000001 00000000ffffffff 0000000000000000 [ 1383.272491][T16717] page dumped because: page_pool leak [ 1383.277856][T16717] page_owner tracks the page as allocated [ 1383.283590][T16717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 16717, tgid 16714 (syz.3.2708), ts 1380283282727, free_ts 1379263018273 [ 1383.300980][T16717] post_alloc_hook+0x2d1/0x350 [ 1383.305723][T16717] get_page_from_freelist+0xfce/0x2f80 [ 1383.311184][T16717] __alloc_pages_noprof+0x223/0x25b0 [ 1383.316461][T16717] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 1383.322009][T16717] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1383.327893][T16717] page_pool_alloc_netmem+0xc4/0x160 [ 1383.333178][T16717] page_pool_alloc_pages+0x1a/0x60 [ 1383.338277][T16717] skb_pp_cow_data+0x72f/0xe80 [ 1383.343052][T16717] skb_cow_data_for_xdp+0x88/0xb0 [ 1383.348067][T16717] do_xdp_generic+0x3f1/0xe70 [ 1383.352744][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1383.359518][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1383.365301][T16717] __netif_receive_skb+0x1d/0x160 [ 1383.370323][T16717] netif_receive_skb+0x13f/0x7b0 [ 1383.375252][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1383.380551][T16717] tun_get_user+0x2a22/0x3e50 [ 1383.385239][T16717] page last free pid 5825 tgid 5825 stack trace: [ 1383.391564][T16717] free_unref_page+0x661/0x1080 [ 1383.396420][T16717] vfree+0x174/0x950 [ 1383.400320][T16717] delayed_vfree_work+0x56/0x70 [ 1383.405156][T16717] process_one_work+0x9c5/0x1ba0 [ 1383.410097][T16717] worker_thread+0x6c8/0xf00 [ 1383.414674][T16717] kthread+0x2c1/0x3a0 [ 1383.418728][T16717] ret_from_fork+0x45/0x80 [ 1383.423141][T16717] ret_from_fork_asm+0x1a/0x30 [ 1383.427902][T16717] Modules linked in: [ 1383.431799][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.3.2708 Tainted: G B 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1383.444025][T16717] Tainted: [B]=BAD_PAGE [ 1383.448144][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1383.458168][T16717] Call Trace: [ 1383.461418][T16717] [ 1383.464320][T16717] dump_stack_lvl+0x16c/0x1f0 [ 1383.468970][T16717] bad_page+0xb3/0x1f0 [ 1383.473012][T16717] ? __pfx_bad_page+0x10/0x10 [ 1383.477661][T16717] ? page_bad_reason+0x9d/0x1e0 [ 1383.482483][T16717] free_unref_page+0x72f/0x1080 [ 1383.487306][T16717] page_frag_free+0x255/0x2a0 [ 1383.491961][T16717] __xdp_return+0x217/0xa90 [ 1383.496450][T16717] bpf_xdp_adjust_tail+0xa78/0x1080 [ 1383.501636][T16717] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 1383.507063][T16717] bpf_prog_run_generic_xdp+0x630/0x1510 [ 1383.512672][T16717] do_xdp_generic+0x70a/0xe70 [ 1383.517321][T16717] ? __pfx_do_xdp_generic+0x10/0x10 [ 1383.522491][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1383.527658][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1383.532567][T16717] ? mark_lock+0xb5/0xc60 [ 1383.536865][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1383.543603][T16717] ? hlock_class+0x4e/0x130 [ 1383.548080][T16717] ? __lock_acquire+0x15a9/0x3c40 [ 1383.553077][T16717] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1383.560160][T16717] ? hlock_class+0x4e/0x130 [ 1383.564640][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1383.569557][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1383.574725][T16717] ? find_held_lock+0x2d/0x110 [ 1383.579463][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1383.585241][T16717] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1383.591629][T16717] ? rcu_is_watching+0x12/0xc0 [ 1383.596366][T16717] ? ktime_get_with_offset+0x273/0x3a0 [ 1383.601797][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 1383.606966][T16717] ? netif_receive_skb+0x109/0x7b0 [ 1383.612052][T16717] __netif_receive_skb+0x1d/0x160 [ 1383.617048][T16717] netif_receive_skb+0x13f/0x7b0 [ 1383.621956][T16717] ? __pfx_netif_receive_skb+0x10/0x10 [ 1383.627385][T16717] ? _copy_from_iter+0x15e/0x1560 [ 1383.632382][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1383.637548][T16717] ? __pfx__copy_from_iter+0x10/0x10 [ 1383.642807][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1383.648065][T16717] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1383.653842][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1383.658665][T16717] ? lock_acquire+0x2f/0xb0 [ 1383.663145][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1383.667968][T16717] tun_get_user+0x2a22/0x3e50 [ 1383.672619][T16717] ? in_gate_area+0xf0/0x100 [ 1383.677178][T16717] ? __pfx_tun_get_user+0x10/0x10 [ 1383.682175][T16717] ? find_held_lock+0x2d/0x110 [ 1383.686923][T16717] ? __pfx_lock_release+0x10/0x10 [ 1383.691925][T16717] tun_chr_write_iter+0xdc/0x210 [ 1383.696853][T16717] vfs_write+0x5ae/0x1150 [ 1383.701154][T16717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1383.706681][T16717] ? __pfx_vfs_write+0x10/0x10 [ 1383.711414][T16717] ? do_futex+0x123/0x350 [ 1383.715713][T16717] ? __fget_files+0x40/0x3a0 [ 1383.720274][T16717] ksys_write+0x12b/0x250 [ 1383.724572][T16717] ? __pfx_ksys_write+0x10/0x10 [ 1383.729393][T16717] do_syscall_64+0xcd/0x250 [ 1383.733869][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.739741][T16717] RIP: 0033:0x7fd9829847df [ 1383.744154][T16717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1383.763732][T16717] RSP: 002b:00007fd983853000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1383.772113][T16717] RAX: ffffffffffffffda RBX: 00007fd982b75fa0 RCX: 00007fd9829847df [ 1383.780056][T16717] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 00000000000000c8 [ 1383.787995][T16717] RBP: 00007fd982a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1383.795946][T16717] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1383.803886][T16717] R13: 0000000000000000 R14: 00007fd982b75fa0 R15: 00007ffd3da396e8 [ 1383.811830][T16717] [ 1383.814859][T16717] BUG: Bad page state in process syz.3.2708 pfn:6c538 [ 1383.821715][T16717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806c538c30 pfn:0x6c538 [ 1383.831800][T16717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1383.838908][T16717] raw: 00fff00000000000 dead000000000040 ffff88801b790000 0000000000000000 [ 1383.847503][T16717] raw: ffff88806c538c30 0000000000000001 00000000ffffffff 0000000000000000 [ 1383.856092][T16717] page dumped because: page_pool leak [ 1383.861571][T16717] page_owner tracks the page as allocated [ 1383.867267][T16717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 16717, tgid 16714 (syz.3.2708), ts 1380283274804, free_ts 1379263024954 [ 1383.884632][T16717] post_alloc_hook+0x2d1/0x350 [ 1383.889412][T16717] get_page_from_freelist+0xfce/0x2f80 [ 1383.894872][T16717] __alloc_pages_noprof+0x223/0x25b0 [ 1383.900171][T16717] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 1383.905715][T16717] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1383.911641][T16717] page_pool_alloc_netmem+0xc4/0x160 [ 1383.916929][T16717] page_pool_alloc_pages+0x1a/0x60 [ 1383.922047][T16717] skb_pp_cow_data+0x72f/0xe80 [ 1383.926817][T16717] skb_cow_data_for_xdp+0x88/0xb0 [ 1383.931849][T16717] do_xdp_generic+0x3f1/0xe70 [ 1383.936523][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1383.943306][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1383.949112][T16717] __netif_receive_skb+0x1d/0x160 [ 1383.954141][T16717] netif_receive_skb+0x13f/0x7b0 [ 1383.959074][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1383.964363][T16717] tun_get_user+0x2a22/0x3e50 [ 1383.969041][T16717] page last free pid 5825 tgid 5825 stack trace: [ 1383.975369][T16717] free_unref_page+0x661/0x1080 [ 1383.976727][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 1383.976738][ T29] audit: type=1400 audit(1735523929.003:53399): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1383.980226][T16717] vfree+0x174/0x950 [ 1383.980245][T16717] delayed_vfree_work+0x56/0x70 [ 1383.980263][T16717] process_one_work+0x9c5/0x1ba0 [ 1383.980282][T16717] worker_thread+0x6c8/0xf00 [ 1383.988012][ T29] audit: type=1400 audit(1735523929.003:53400): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1384.008433][T16717] kthread+0x2c1/0x3a0 [ 1384.008459][T16717] ret_from_fork+0x45/0x80 [ 1384.008476][T16717] ret_from_fork_asm+0x1a/0x30 [ 1384.020164][ T29] audit: type=1400 audit(1735523929.043:53401): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1384.022115][T16717] Modules linked in: [ 1384.026681][ T29] audit: type=1400 audit(1735523929.043:53402): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1384.048291][T16717] [ 1384.048305][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.3.2708 Tainted: G B 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1384.048331][T16717] Tainted: [B]=BAD_PAGE [ 1384.048338][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1384.048348][T16717] Call Trace: [ 1384.048354][T16717] [ 1384.048361][T16717] dump_stack_lvl+0x16c/0x1f0 [ 1384.048387][T16717] bad_page+0xb3/0x1f0 [ 1384.059326][ T29] audit: type=1400 audit(1735523929.043:53403): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1384.061555][T16717] ? __pfx_bad_page+0x10/0x10 [ 1384.182029][T16717] ? page_bad_reason+0x9d/0x1e0 [ 1384.186869][T16717] free_unref_page+0x72f/0x1080 [ 1384.191705][T16717] page_frag_free+0x255/0x2a0 [ 1384.196353][T16717] __xdp_return+0x217/0xa90 [ 1384.200827][T16717] bpf_xdp_adjust_tail+0xa78/0x1080 [ 1384.206003][T16717] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 1384.211433][T16717] bpf_prog_run_generic_xdp+0x630/0x1510 [ 1384.217044][T16717] do_xdp_generic+0x70a/0xe70 [ 1384.221693][T16717] ? __pfx_do_xdp_generic+0x10/0x10 [ 1384.226866][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1384.232038][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1384.236946][T16717] ? mark_lock+0xb5/0xc60 [ 1384.241245][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1384.247980][T16717] ? hlock_class+0x4e/0x130 [ 1384.252455][T16717] ? __lock_acquire+0x15a9/0x3c40 [ 1384.257450][T16717] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1384.264541][T16717] ? hlock_class+0x4e/0x130 [ 1384.269021][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1384.273932][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1384.279101][T16717] ? find_held_lock+0x2d/0x110 [ 1384.283842][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1384.289622][T16717] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1384.296009][T16717] ? rcu_is_watching+0x12/0xc0 [ 1384.300749][T16717] ? ktime_get_with_offset+0x273/0x3a0 [ 1384.306188][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 1384.311366][T16717] ? netif_receive_skb+0x109/0x7b0 [ 1384.316453][T16717] __netif_receive_skb+0x1d/0x160 [ 1384.321450][T16717] netif_receive_skb+0x13f/0x7b0 [ 1384.326359][T16717] ? __pfx_netif_receive_skb+0x10/0x10 [ 1384.331802][T16717] ? _copy_from_iter+0x15e/0x1560 [ 1384.336803][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1384.341974][T16717] ? __pfx__copy_from_iter+0x10/0x10 [ 1384.347235][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1384.352505][T16717] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1384.358284][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1384.363110][T16717] ? lock_acquire+0x2f/0xb0 [ 1384.367584][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1384.372408][T16717] tun_get_user+0x2a22/0x3e50 [ 1384.377060][T16717] ? in_gate_area+0xf0/0x100 [ 1384.381621][T16717] ? __pfx_tun_get_user+0x10/0x10 [ 1384.386617][T16717] ? find_held_lock+0x2d/0x110 [ 1384.391364][T16717] ? __pfx_lock_release+0x10/0x10 [ 1384.396370][T16717] tun_chr_write_iter+0xdc/0x210 [ 1384.401281][T16717] vfs_write+0x5ae/0x1150 [ 1384.405591][T16717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1384.411114][T16717] ? __pfx_vfs_write+0x10/0x10 [ 1384.415861][T16717] ? do_futex+0x123/0x350 [ 1384.420170][T16717] ? __fget_files+0x40/0x3a0 [ 1384.424734][T16717] ksys_write+0x12b/0x250 [ 1384.429034][T16717] ? __pfx_ksys_write+0x10/0x10 [ 1384.433856][T16717] do_syscall_64+0xcd/0x250 [ 1384.438333][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.444201][T16717] RIP: 0033:0x7fd9829847df [ 1384.448586][T16717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1384.468165][T16717] RSP: 002b:00007fd983853000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1384.476550][T16717] RAX: ffffffffffffffda RBX: 00007fd982b75fa0 RCX: 00007fd9829847df [ 1384.484492][T16717] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 00000000000000c8 [ 1384.492522][T16717] RBP: 00007fd982a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1384.500462][T16717] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1384.508404][T16717] R13: 0000000000000000 R14: 00007fd982b75fa0 R15: 00007ffd3da396e8 [ 1384.516361][T16717] [ 1384.519392][T16717] BUG: Bad page state in process syz.3.2708 pfn:65b63 [ 1384.526231][T16717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888065b63fc0 pfn:0x65b63 [ 1384.536317][T16717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1384.543453][T16717] raw: 00fff00000000000 dead000000000040 ffff88801b790000 0000000000000000 [ 1384.552048][T16717] raw: ffff888065b63fc0 0000000000000001 00000000ffffffff 0000000000000000 [ 1384.560644][T16717] page dumped because: page_pool leak [ 1384.565996][T16717] page_owner tracks the page as allocated [ 1384.571711][T16717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 16717, tgid 16714 (syz.3.2708), ts 1380283266623, free_ts 1379263030547 [ 1384.589096][T16717] post_alloc_hook+0x2d1/0x350 [ 1384.593860][T16717] get_page_from_freelist+0xfce/0x2f80 [ 1384.599340][T16717] __alloc_pages_noprof+0x223/0x25b0 [ 1384.604619][T16717] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 1384.610164][T16717] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1384.616061][T16717] page_pool_alloc_netmem+0xc4/0x160 [ 1384.621347][T16717] page_pool_alloc_pages+0x1a/0x60 [ 1384.626447][T16717] skb_pp_cow_data+0x72f/0xe80 [ 1384.631217][T16717] skb_cow_data_for_xdp+0x88/0xb0 [ 1384.636231][T16717] do_xdp_generic+0x3f1/0xe70 [ 1384.640910][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1384.647665][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1384.653477][T16717] __netif_receive_skb+0x1d/0x160 [ 1384.658497][T16717] netif_receive_skb+0x13f/0x7b0 [ 1384.663434][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1384.668711][T16717] tun_get_user+0x2a22/0x3e50 [ 1384.673389][T16717] page last free pid 5825 tgid 5825 stack trace: [ 1384.679712][T16717] free_unref_page+0x661/0x1080 [ 1384.684538][T16717] vfree+0x174/0x950 [ 1384.688400][T16717] delayed_vfree_work+0x56/0x70 [ 1384.693247][T16717] process_one_work+0x9c5/0x1ba0 [ 1384.698176][T16717] worker_thread+0x6c8/0xf00 [ 1384.702784][T16717] kthread+0x2c1/0x3a0 [ 1384.706844][T16717] ret_from_fork+0x45/0x80 [ 1384.711255][T16717] ret_from_fork_asm+0x1a/0x30 [ 1384.716014][T16717] Modules linked in: [ 1384.719909][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.3.2708 Tainted: G B 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1384.732137][T16717] Tainted: [B]=BAD_PAGE [ 1384.736259][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1384.746284][T16717] Call Trace: [ 1384.749536][T16717] [ 1384.752441][T16717] dump_stack_lvl+0x16c/0x1f0 [ 1384.757106][T16717] bad_page+0xb3/0x1f0 [ 1384.761152][T16717] ? __pfx_bad_page+0x10/0x10 [ 1384.765801][T16717] ? page_bad_reason+0x9d/0x1e0 [ 1384.770624][T16717] free_unref_page+0x72f/0x1080 [ 1384.775447][T16717] page_frag_free+0x255/0x2a0 [ 1384.780103][T16717] __xdp_return+0x217/0xa90 [ 1384.784610][T16717] bpf_xdp_adjust_tail+0xa78/0x1080 [ 1384.789786][T16717] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 1384.795218][T16717] bpf_prog_run_generic_xdp+0x630/0x1510 [ 1384.800836][T16717] do_xdp_generic+0x70a/0xe70 [ 1384.805485][T16717] ? __pfx_do_xdp_generic+0x10/0x10 [ 1384.810666][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1384.815835][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1384.820744][T16717] ? mark_lock+0xb5/0xc60 [ 1384.825058][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1384.831798][T16717] ? hlock_class+0x4e/0x130 [ 1384.836286][T16717] ? __lock_acquire+0x15a9/0x3c40 [ 1384.841296][T16717] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1384.848394][T16717] ? hlock_class+0x4e/0x130 [ 1384.852878][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1384.857979][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1384.863148][T16717] ? find_held_lock+0x2d/0x110 [ 1384.867900][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1384.873681][T16717] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1384.880075][T16717] ? rcu_is_watching+0x12/0xc0 [ 1384.884867][T16717] ? ktime_get_with_offset+0x273/0x3a0 [ 1384.890311][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 1384.895492][T16717] ? netif_receive_skb+0x109/0x7b0 [ 1384.900581][T16717] __netif_receive_skb+0x1d/0x160 [ 1384.905596][T16717] netif_receive_skb+0x13f/0x7b0 [ 1384.910507][T16717] ? __pfx_netif_receive_skb+0x10/0x10 [ 1384.915938][T16717] ? _copy_from_iter+0x15e/0x1560 [ 1384.920940][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1384.926109][T16717] ? __pfx__copy_from_iter+0x10/0x10 [ 1384.931385][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1384.936645][T16717] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1384.942432][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1384.947263][T16717] ? lock_acquire+0x2f/0xb0 [ 1384.951738][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1384.956574][T16717] tun_get_user+0x2a22/0x3e50 [ 1384.961235][T16717] ? in_gate_area+0xf0/0x100 [ 1384.965796][T16717] ? __pfx_tun_get_user+0x10/0x10 [ 1384.970805][T16717] ? find_held_lock+0x2d/0x110 [ 1384.975555][T16717] ? __pfx_lock_release+0x10/0x10 [ 1384.980557][T16717] tun_chr_write_iter+0xdc/0x210 [ 1384.985481][T16717] vfs_write+0x5ae/0x1150 [ 1384.989783][T16717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1384.995310][T16717] ? __pfx_vfs_write+0x10/0x10 [ 1385.000049][T16717] ? do_futex+0x123/0x350 [ 1385.004354][T16717] ? __fget_files+0x40/0x3a0 [ 1385.008918][T16717] ksys_write+0x12b/0x250 [ 1385.013230][T16717] ? __pfx_ksys_write+0x10/0x10 [ 1385.018052][T16717] do_syscall_64+0xcd/0x250 [ 1385.022537][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.028413][T16717] RIP: 0033:0x7fd9829847df [ 1385.032814][T16717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1385.052410][T16717] RSP: 002b:00007fd983853000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1385.060803][T16717] RAX: ffffffffffffffda RBX: 00007fd982b75fa0 RCX: 00007fd9829847df [ 1385.068744][T16717] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 00000000000000c8 [ 1385.076700][T16717] RBP: 00007fd982a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1385.084646][T16717] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1385.092589][T16717] R13: 0000000000000000 R14: 00007fd982b75fa0 R15: 00007ffd3da396e8 [ 1385.100536][T16717] [ 1385.103569][T16717] BUG: Bad page state in process syz.3.2708 pfn:6ecac [ 1385.110432][T16717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806ecacf00 pfn:0x6ecac [ 1385.111910][ T29] audit: type=1400 audit(1735523930.133:53404): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1385.120509][T16717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1385.120534][T16717] raw: 00fff00000000000 dead000000000040 ffff88801b790000 0000000000000000 [ 1385.158240][T16717] raw: ffff88806ecacf00 0000000000000001 00000000ffffffff 0000000000000000 [ 1385.166853][T16717] page dumped because: page_pool leak [ 1385.172237][T16717] page_owner tracks the page as allocated [ 1385.175272][ T29] audit: type=1400 audit(1735523930.133:53405): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1385.177931][T16717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 16717, tgid 16714 (syz.3.2708), ts 1380283258457, free_ts 1379263036184 [ 1385.201817][ T29] audit: type=1400 audit(1735523930.133:53406): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1385.216889][T16717] post_alloc_hook+0x2d1/0x350 [ 1385.216915][T16717] get_page_from_freelist+0xfce/0x2f80 [ 1385.216935][T16717] __alloc_pages_noprof+0x223/0x25b0 [ 1385.216952][T16717] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 1385.216970][T16717] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1385.243683][ T29] audit: type=1400 audit(1735523930.133:53407): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1385.244077][T16717] page_pool_alloc_netmem+0xc4/0x160 [ 1385.251090][ T29] audit: type=1400 audit(1735523930.133:53408): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1385.254785][T16717] page_pool_alloc_pages+0x1a/0x60 [ 1385.322714][T16717] skb_pp_cow_data+0x72f/0xe80 [ 1385.327456][T16717] skb_cow_data_for_xdp+0x88/0xb0 [ 1385.332474][T16717] do_xdp_generic+0x3f1/0xe70 [ 1385.337146][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1385.343923][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1385.349735][T16717] __netif_receive_skb+0x1d/0x160 [ 1385.354736][T16717] netif_receive_skb+0x13f/0x7b0 [ 1385.359678][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1385.364970][T16717] tun_get_user+0x2a22/0x3e50 [ 1385.369656][T16717] page last free pid 5825 tgid 5825 stack trace: [ 1385.375974][T16717] free_unref_page+0x661/0x1080 [ 1385.380830][T16717] vfree+0x174/0x950 [ 1385.384711][T16717] delayed_vfree_work+0x56/0x70 [ 1385.389564][T16717] process_one_work+0x9c5/0x1ba0 [ 1385.394490][T16717] worker_thread+0x6c8/0xf00 [ 1385.399050][T16717] kthread+0x2c1/0x3a0 [ 1385.403136][T16717] ret_from_fork+0x45/0x80 [ 1385.407541][T16717] ret_from_fork_asm+0x1a/0x30 [ 1385.412307][T16717] Modules linked in: [ 1385.416203][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.3.2708 Tainted: G B 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1385.428410][T16717] Tainted: [B]=BAD_PAGE [ 1385.432629][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1385.442655][T16717] Call Trace: [ 1385.445918][T16717] [ 1385.448829][T16717] dump_stack_lvl+0x16c/0x1f0 [ 1385.453482][T16717] bad_page+0xb3/0x1f0 [ 1385.457524][T16717] ? __pfx_bad_page+0x10/0x10 [ 1385.462183][T16717] ? page_bad_reason+0x9d/0x1e0 [ 1385.467009][T16717] free_unref_page+0x72f/0x1080 [ 1385.471901][T16717] page_frag_free+0x255/0x2a0 [ 1385.476570][T16717] __xdp_return+0x217/0xa90 [ 1385.481057][T16717] bpf_xdp_adjust_tail+0xa78/0x1080 [ 1385.486242][T16717] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 1385.491673][T16717] bpf_prog_run_generic_xdp+0x630/0x1510 [ 1385.497282][T16717] do_xdp_generic+0x70a/0xe70 [ 1385.501933][T16717] ? __pfx_do_xdp_generic+0x10/0x10 [ 1385.507105][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1385.512275][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1385.517193][T16717] ? mark_lock+0xb5/0xc60 [ 1385.521497][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1385.528234][T16717] ? hlock_class+0x4e/0x130 [ 1385.532722][T16717] ? __lock_acquire+0x15a9/0x3c40 [ 1385.537716][T16717] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1385.544800][T16717] ? hlock_class+0x4e/0x130 [ 1385.549284][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1385.554199][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1385.559367][T16717] ? find_held_lock+0x2d/0x110 [ 1385.564104][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1385.569892][T16717] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1385.576300][T16717] ? rcu_is_watching+0x12/0xc0 [ 1385.581038][T16717] ? ktime_get_with_offset+0x273/0x3a0 [ 1385.586466][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 1385.591638][T16717] ? netif_receive_skb+0x109/0x7b0 [ 1385.596724][T16717] __netif_receive_skb+0x1d/0x160 [ 1385.601721][T16717] netif_receive_skb+0x13f/0x7b0 [ 1385.606638][T16717] ? __pfx_netif_receive_skb+0x10/0x10 [ 1385.612071][T16717] ? _copy_from_iter+0x15e/0x1560 [ 1385.617069][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1385.622242][T16717] ? __pfx__copy_from_iter+0x10/0x10 [ 1385.627514][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1385.632773][T16717] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1385.638550][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1385.643373][T16717] ? lock_acquire+0x2f/0xb0 [ 1385.647848][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1385.652674][T16717] tun_get_user+0x2a22/0x3e50 [ 1385.657324][T16717] ? in_gate_area+0xf0/0x100 [ 1385.661895][T16717] ? __pfx_tun_get_user+0x10/0x10 [ 1385.666891][T16717] ? find_held_lock+0x2d/0x110 [ 1385.671636][T16717] ? __pfx_lock_release+0x10/0x10 [ 1385.676646][T16717] tun_chr_write_iter+0xdc/0x210 [ 1385.681567][T16717] vfs_write+0x5ae/0x1150 [ 1385.685870][T16717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1385.691406][T16717] ? __pfx_vfs_write+0x10/0x10 [ 1385.696140][T16717] ? do_futex+0x123/0x350 [ 1385.700449][T16717] ? __fget_files+0x40/0x3a0 [ 1385.705012][T16717] ksys_write+0x12b/0x250 [ 1385.709318][T16717] ? __pfx_ksys_write+0x10/0x10 [ 1385.714140][T16717] do_syscall_64+0xcd/0x250 [ 1385.718617][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.724486][T16717] RIP: 0033:0x7fd9829847df [ 1385.728889][T16717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1385.748478][T16717] RSP: 002b:00007fd983853000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1385.756862][T16717] RAX: ffffffffffffffda RBX: 00007fd982b75fa0 RCX: 00007fd9829847df [ 1385.764804][T16717] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 00000000000000c8 [ 1385.772748][T16717] RBP: 00007fd982a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1385.780705][T16717] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1385.788646][T16717] R13: 0000000000000000 R14: 00007fd982b75fa0 R15: 00007ffd3da396e8 [ 1385.796592][T16717] [ 1385.799637][T16717] BUG: Bad page state in process syz.3.2708 pfn:6d7a5 [ 1385.806568][T16717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806d7a5000 pfn:0x6d7a5 [ 1385.816678][T16717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1385.823902][T16717] raw: 00fff00000000000 dead000000000040 ffff88801b790000 0000000000000000 [ 1385.832508][T16717] raw: ffff88806d7a5000 0000000000000001 00000000ffffffff 0000000000000000 [ 1385.841104][T16717] page dumped because: page_pool leak [ 1385.846465][T16717] page_owner tracks the page as allocated [ 1385.852187][T16717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 16717, tgid 16714 (syz.3.2708), ts 1380283250567, free_ts 1379263043116 [ 1385.869565][T16717] post_alloc_hook+0x2d1/0x350 [ 1385.874326][T16717] get_page_from_freelist+0xfce/0x2f80 [ 1385.879806][T16717] __alloc_pages_noprof+0x223/0x25b0 [ 1385.885086][T16717] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 1385.890639][T16717] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1385.896527][T16717] page_pool_alloc_netmem+0xc4/0x160 [ 1385.901826][T16717] page_pool_alloc_pages+0x1a/0x60 [ 1385.906928][T16717] skb_pp_cow_data+0x72f/0xe80 [ 1385.911704][T16717] skb_cow_data_for_xdp+0x88/0xb0 [ 1385.916717][T16717] do_xdp_generic+0x3f1/0xe70 [ 1385.921398][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1385.928173][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1385.933993][T16717] __netif_receive_skb+0x1d/0x160 [ 1385.939063][T16717] netif_receive_skb+0x13f/0x7b0 [ 1385.944018][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1385.949322][T16717] tun_get_user+0x2a22/0x3e50 [ 1385.953999][T16717] page last free pid 5825 tgid 5825 stack trace: [ 1385.960324][T16717] free_unref_page+0x661/0x1080 [ 1385.965170][T16717] vfree+0x174/0x950 [ 1385.969054][T16717] delayed_vfree_work+0x56/0x70 [ 1385.973910][T16717] process_one_work+0x9c5/0x1ba0 [ 1385.978850][T16717] worker_thread+0x6c8/0xf00 [ 1385.983474][T16717] kthread+0x2c1/0x3a0 [ 1385.987519][T16717] ret_from_fork+0x45/0x80 [ 1385.991948][T16717] ret_from_fork_asm+0x1a/0x30 [ 1385.996716][T16717] Modules linked in: [ 1386.000619][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.3.2708 Tainted: G B 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1386.012855][T16717] Tainted: [B]=BAD_PAGE [ 1386.016978][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1386.027007][T16717] Call Trace: [ 1386.030260][T16717] [ 1386.033171][T16717] dump_stack_lvl+0x16c/0x1f0 [ 1386.037826][T16717] bad_page+0xb3/0x1f0 [ 1386.041881][T16717] ? __pfx_bad_page+0x10/0x10 [ 1386.046569][T16717] ? page_bad_reason+0x9d/0x1e0 [ 1386.051406][T16717] free_unref_page+0x72f/0x1080 [ 1386.056243][T16717] page_frag_free+0x255/0x2a0 [ 1386.060915][T16717] __xdp_return+0x217/0xa90 [ 1386.065404][T16717] bpf_xdp_adjust_tail+0xa78/0x1080 [ 1386.070580][T16717] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 1386.076008][T16717] bpf_prog_run_generic_xdp+0x630/0x1510 [ 1386.081620][T16717] do_xdp_generic+0x70a/0xe70 [ 1386.086275][T16717] ? __pfx_do_xdp_generic+0x10/0x10 [ 1386.091447][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1386.096624][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1386.101535][T16717] ? mark_lock+0xb5/0xc60 [ 1386.105839][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1386.112582][T16717] ? hlock_class+0x4e/0x130 [ 1386.117073][T16717] ? __lock_acquire+0x15a9/0x3c40 [ 1386.122083][T16717] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1386.129194][T16717] ? hlock_class+0x4e/0x130 [ 1386.133699][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1386.138622][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1386.143813][T16717] ? find_held_lock+0x2d/0x110 [ 1386.148563][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1386.154355][T16717] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1386.160752][T16717] ? rcu_is_watching+0x12/0xc0 [ 1386.165494][T16717] ? ktime_get_with_offset+0x273/0x3a0 [ 1386.170926][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 1386.176107][T16717] ? netif_receive_skb+0x109/0x7b0 [ 1386.181195][T16717] __netif_receive_skb+0x1d/0x160 [ 1386.186197][T16717] netif_receive_skb+0x13f/0x7b0 [ 1386.191110][T16717] ? __pfx_netif_receive_skb+0x10/0x10 [ 1386.196542][T16717] ? _copy_from_iter+0x15e/0x1560 [ 1386.201543][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1386.206712][T16717] ? __pfx__copy_from_iter+0x10/0x10 [ 1386.211974][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1386.217241][T16717] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1386.223022][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1386.227852][T16717] ? lock_acquire+0x2f/0xb0 [ 1386.232327][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1386.237170][T16717] tun_get_user+0x2a22/0x3e50 [ 1386.241863][T16717] ? in_gate_area+0xf0/0x100 [ 1386.246433][T16717] ? __pfx_tun_get_user+0x10/0x10 [ 1386.251444][T16717] ? find_held_lock+0x2d/0x110 [ 1386.256185][T16717] ? __pfx_lock_release+0x10/0x10 [ 1386.261189][T16717] tun_chr_write_iter+0xdc/0x210 [ 1386.266107][T16717] vfs_write+0x5ae/0x1150 [ 1386.270411][T16717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1386.275933][T16717] ? __pfx_vfs_write+0x10/0x10 [ 1386.280674][T16717] ? do_futex+0x123/0x350 [ 1386.284981][T16717] ? __fget_files+0x40/0x3a0 [ 1386.289546][T16717] ksys_write+0x12b/0x250 [ 1386.293851][T16717] ? __pfx_ksys_write+0x10/0x10 [ 1386.298685][T16717] do_syscall_64+0xcd/0x250 [ 1386.303164][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.309038][T16717] RIP: 0033:0x7fd9829847df [ 1386.313443][T16717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1386.333034][T16717] RSP: 002b:00007fd983853000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1386.341419][T16717] RAX: ffffffffffffffda RBX: 00007fd982b75fa0 RCX: 00007fd9829847df [ 1386.349363][T16717] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 00000000000000c8 [ 1386.357317][T16717] RBP: 00007fd982a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1386.365277][T16717] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1386.373226][T16717] R13: 0000000000000000 R14: 00007fd982b75fa0 R15: 00007ffd3da396e8 [ 1386.381177][T16717] [ 1386.384232][T16717] BUG: Bad page state in process syz.3.2708 pfn:41ab3 [ 1386.391110][T16717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888041ab3f08 pfn:0x41ab3 [ 1386.401209][T16717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1386.408331][T16717] raw: 00fff00000000000 dead000000000040 ffff88801b790000 0000000000000000 [ 1386.416975][T16717] raw: ffff888041ab3f08 0000000000000001 00000000ffffffff 0000000000000000 [ 1386.425579][T16717] page dumped because: page_pool leak [ 1386.430962][T16717] page_owner tracks the page as allocated [ 1386.436670][T16717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 16717, tgid 16714 (syz.3.2708), ts 1380283241936, free_ts 1379263073131 [ 1386.454050][T16717] post_alloc_hook+0x2d1/0x350 [ 1386.458815][T16717] get_page_from_freelist+0xfce/0x2f80 [ 1386.464290][T16717] __alloc_pages_noprof+0x223/0x25b0 [ 1386.469602][T16717] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 1386.475142][T16717] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1386.481082][T16717] page_pool_alloc_netmem+0xc4/0x160 [ 1386.486387][T16717] page_pool_alloc_pages+0x1a/0x60 [ 1386.491529][T16717] skb_pp_cow_data+0x72f/0xe80 [ 1386.496291][T16717] skb_cow_data_for_xdp+0x88/0xb0 [ 1386.501334][T16717] do_xdp_generic+0x3f1/0xe70 [ 1386.506019][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1386.512812][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1386.518616][T16717] __netif_receive_skb+0x1d/0x160 [ 1386.523659][T16717] netif_receive_skb+0x13f/0x7b0 [ 1386.528598][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1386.533907][T16717] tun_get_user+0x2a22/0x3e50 [ 1386.538585][T16717] page last free pid 5825 tgid 5825 stack trace: [ 1386.544926][T16717] free_unref_page+0x661/0x1080 [ 1386.549792][T16717] vfree+0x174/0x950 [ 1386.553669][T16717] delayed_vfree_work+0x56/0x70 [ 1386.558493][T16717] process_one_work+0x9c5/0x1ba0 [ 1386.563459][T16717] worker_thread+0x6c8/0xf00 [ 1386.568069][T16717] kthread+0x2c1/0x3a0 [ 1386.572159][T16717] ret_from_fork+0x45/0x80 [ 1386.576569][T16717] ret_from_fork_asm+0x1a/0x30 [ 1386.581385][T16717] Modules linked in: [ 1386.585288][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.3.2708 Tainted: G B 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1386.597500][T16717] Tainted: [B]=BAD_PAGE [ 1386.601636][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1386.611667][T16717] Call Trace: [ 1386.614931][T16717] [ 1386.617841][T16717] dump_stack_lvl+0x16c/0x1f0 [ 1386.622496][T16717] bad_page+0xb3/0x1f0 [ 1386.626541][T16717] ? __pfx_bad_page+0x10/0x10 [ 1386.631192][T16717] ? page_bad_reason+0x9d/0x1e0 [ 1386.636026][T16717] free_unref_page+0x72f/0x1080 [ 1386.640866][T16717] page_frag_free+0x255/0x2a0 [ 1386.645534][T16717] __xdp_return+0x217/0xa90 [ 1386.650014][T16717] bpf_xdp_adjust_tail+0xa78/0x1080 [ 1386.655190][T16717] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 1386.660631][T16717] bpf_prog_run_generic_xdp+0x630/0x1510 [ 1386.666242][T16717] do_xdp_generic+0x70a/0xe70 [ 1386.670910][T16717] ? __pfx_do_xdp_generic+0x10/0x10 [ 1386.676084][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1386.681267][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1386.686185][T16717] ? mark_lock+0xb5/0xc60 [ 1386.690499][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1386.697271][T16717] ? hlock_class+0x4e/0x130 [ 1386.701761][T16717] ? __lock_acquire+0x15a9/0x3c40 [ 1386.706851][T16717] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1386.713935][T16717] ? hlock_class+0x4e/0x130 [ 1386.718423][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1386.723335][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1386.728523][T16717] ? find_held_lock+0x2d/0x110 [ 1386.733276][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1386.739069][T16717] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1386.745462][T16717] ? rcu_is_watching+0x12/0xc0 [ 1386.750215][T16717] ? ktime_get_with_offset+0x273/0x3a0 [ 1386.755658][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 1386.760842][T16717] ? netif_receive_skb+0x109/0x7b0 [ 1386.765929][T16717] __netif_receive_skb+0x1d/0x160 [ 1386.770936][T16717] netif_receive_skb+0x13f/0x7b0 [ 1386.775854][T16717] ? __pfx_netif_receive_skb+0x10/0x10 [ 1386.781320][T16717] ? _copy_from_iter+0x15e/0x1560 [ 1386.786435][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1386.791623][T16717] ? __pfx__copy_from_iter+0x10/0x10 [ 1386.796923][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1386.802212][T16717] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1386.808002][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1386.812852][T16717] ? lock_acquire+0x2f/0xb0 [ 1386.817343][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1386.822181][T16717] tun_get_user+0x2a22/0x3e50 [ 1386.826848][T16717] ? in_gate_area+0xf0/0x100 [ 1386.831450][T16717] ? __pfx_tun_get_user+0x10/0x10 [ 1386.836477][T16717] ? find_held_lock+0x2d/0x110 [ 1386.841249][T16717] ? __pfx_lock_release+0x10/0x10 [ 1386.846267][T16717] tun_chr_write_iter+0xdc/0x210 [ 1386.851183][T16717] vfs_write+0x5ae/0x1150 [ 1386.855486][T16717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1386.861010][T16717] ? __pfx_vfs_write+0x10/0x10 [ 1386.865757][T16717] ? do_futex+0x123/0x350 [ 1386.870077][T16717] ? __fget_files+0x40/0x3a0 [ 1386.874658][T16717] ksys_write+0x12b/0x250 [ 1386.878977][T16717] ? __pfx_ksys_write+0x10/0x10 [ 1386.883805][T16717] do_syscall_64+0xcd/0x250 [ 1386.888305][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.894205][T16717] RIP: 0033:0x7fd9829847df [ 1386.898605][T16717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1386.918187][T16717] RSP: 002b:00007fd983853000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1386.926582][T16717] RAX: ffffffffffffffda RBX: 00007fd982b75fa0 RCX: 00007fd9829847df [ 1386.934526][T16717] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 00000000000000c8 [ 1386.942482][T16717] RBP: 00007fd982a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1386.950435][T16717] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1386.958391][T16717] R13: 0000000000000000 R14: 00007fd982b75fa0 R15: 00007ffd3da396e8 [ 1386.966383][T16717] [ 1386.969491][T16717] BUG: Bad page state in process syz.3.2708 pfn:6cb6c [ 1386.976346][T16717] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806cb6cf70 pfn:0x6cb6c [ 1386.986572][T16717] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1386.993741][T16717] raw: 00fff00000000000 dead000000000040 ffff88801b790000 0000000000000000 [ 1387.002386][T16717] raw: ffff88806cb6cf70 0000000000000001 00000000ffffffff 0000000000000000 [ 1387.011022][T16717] page dumped because: page_pool leak [ 1387.016412][T16717] page_owner tracks the page as allocated [ 1387.022302][T16717] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 16717, tgid 16714 (syz.3.2708), ts 1380283233980, free_ts 1379263079506 [ 1387.039716][T16717] post_alloc_hook+0x2d1/0x350 [ 1387.044494][T16717] get_page_from_freelist+0xfce/0x2f80 [ 1387.049986][T16717] __alloc_pages_noprof+0x223/0x25b0 [ 1387.055280][T16717] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 1387.060850][T16717] __page_pool_alloc_pages_slow+0x18f/0x770 [ 1387.066742][T16717] page_pool_alloc_netmem+0xc4/0x160 [ 1387.072054][T16717] page_pool_alloc_pages+0x1a/0x60 [ 1387.077168][T16717] skb_pp_cow_data+0x72f/0xe80 [ 1387.081990][T16717] skb_cow_data_for_xdp+0x88/0xb0 [ 1387.087028][T16717] do_xdp_generic+0x3f1/0xe70 [ 1387.091740][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1387.098529][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1387.104368][T16717] __netif_receive_skb+0x1d/0x160 [ 1387.109435][T16717] netif_receive_skb+0x13f/0x7b0 [ 1387.114388][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1387.119722][T16717] tun_get_user+0x2a22/0x3e50 [ 1387.124430][T16717] page last free pid 5825 tgid 5825 stack trace: [ 1387.130771][T16717] free_unref_page+0x661/0x1080 [ 1387.135631][T16717] vfree+0x174/0x950 [ 1387.139551][T16717] delayed_vfree_work+0x56/0x70 [ 1387.144396][T16717] process_one_work+0x9c5/0x1ba0 [ 1387.149350][T16717] worker_thread+0x6c8/0xf00 [ 1387.153935][T16717] kthread+0x2c1/0x3a0 [ 1387.158004][T16717] ret_from_fork+0x45/0x80 [ 1387.162459][T16717] ret_from_fork_asm+0x1a/0x30 [ 1387.167231][T16717] Modules linked in: [ 1387.171159][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.3.2708 Tainted: G B 6.13.0-rc4-syzkaller-00110-g4099a71718b0 #0 [ 1387.183398][T16717] Tainted: [B]=BAD_PAGE [ 1387.187522][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1387.197555][T16717] Call Trace: [ 1387.200821][T16717] [ 1387.203727][T16717] dump_stack_lvl+0x16c/0x1f0 [ 1387.208393][T16717] bad_page+0xb3/0x1f0 [ 1387.212447][T16717] ? __pfx_bad_page+0x10/0x10 [ 1387.217134][T16717] ? page_bad_reason+0x9d/0x1e0 [ 1387.221987][T16717] free_unref_page+0x72f/0x1080 [ 1387.226833][T16717] page_frag_free+0x255/0x2a0 [ 1387.231492][T16717] __xdp_return+0x217/0xa90 [ 1387.235973][T16717] bpf_xdp_adjust_tail+0xa78/0x1080 [ 1387.241148][T16717] bpf_prog_f476d5219b92964a+0x1e/0x20 [ 1387.246576][T16717] bpf_prog_run_generic_xdp+0x630/0x1510 [ 1387.252221][T16717] do_xdp_generic+0x70a/0xe70 [ 1387.256925][T16717] ? __pfx_do_xdp_generic+0x10/0x10 [ 1387.262110][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1387.267292][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1387.272203][T16717] ? mark_lock+0xb5/0xc60 [ 1387.276504][T16717] __netif_receive_skb_core.constprop.0+0x1330/0x4470 [ 1387.283265][T16717] ? hlock_class+0x4e/0x130 [ 1387.287748][T16717] ? __lock_acquire+0x15a9/0x3c40 [ 1387.292753][T16717] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1387.299842][T16717] ? hlock_class+0x4e/0x130 [ 1387.304318][T16717] ? __lock_acquire+0xcc5/0x3c40 [ 1387.309230][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1387.314401][T16717] ? find_held_lock+0x2d/0x110 [ 1387.319141][T16717] __netif_receive_skb_one_core+0xb1/0x1e0 [ 1387.324920][T16717] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1387.331322][T16717] ? rcu_is_watching+0x12/0xc0 [ 1387.336063][T16717] ? ktime_get_with_offset+0x273/0x3a0 [ 1387.341495][T16717] ? lockdep_hardirqs_on+0x7c/0x110 [ 1387.346667][T16717] ? netif_receive_skb+0x109/0x7b0 [ 1387.351757][T16717] __netif_receive_skb+0x1d/0x160 [ 1387.356759][T16717] netif_receive_skb+0x13f/0x7b0 [ 1387.361675][T16717] ? __pfx_netif_receive_skb+0x10/0x10 [ 1387.367107][T16717] ? _copy_from_iter+0x15e/0x1560 [ 1387.372123][T16717] ? __pfx___lock_acquire+0x10/0x10 [ 1387.377292][T16717] ? __pfx__copy_from_iter+0x10/0x10 [ 1387.382558][T16717] tun_rx_batched.isra.0+0x3eb/0x730 [ 1387.387844][T16717] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1387.393639][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1387.398467][T16717] ? lock_acquire+0x2f/0xb0 [ 1387.402944][T16717] ? tun_get_user+0x13e6/0x3e50 [ 1387.407799][T16717] tun_get_user+0x2a22/0x3e50 [ 1387.412471][T16717] ? in_gate_area+0xf0/0x100 [ 1387.417066][T16717] ? __pfx_tun_get_user+0x10/0x10 [ 1387.422092][T16717] ? find_held_lock+0x2d/0x110 [ 1387.426864][T16717] ? __pfx_lock_release+0x10/0x10 [ 1387.431885][T16717] tun_chr_write_iter+0xdc/0x210 [ 1387.437229][T16717] vfs_write+0x5ae/0x1150 [ 1387.441537][T16717] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1387.447060][T16717] ? __pfx_vfs_write+0x10/0x10 [ 1387.451794][T16717] ? do_futex+0x123/0x350 [ 1387.456124][T16717] ? __fget_files+0x40/0x3a0 [ 1387.460730][T16717] ksys_write+0x12b/0x250 [ 1387.465049][T16717] ? __pfx_ksys_write+0x10/0x10 [ 1387.470306][T16717] do_syscall_64+0xcd/0x250 [ 1387.474797][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.480676][T16717] RIP: 0033:0x7fd9829847df [ 1387.485095][T16717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1387.504682][T16717] RSP: 002b:00007fd983853000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1387.513073][T16717] RAX: ffffffffffffffda RBX: 00007fd982b75fa0 RCX: 00007fd9829847df [ 1387.521016][T16717] RDX: 000000000000fdef RSI: 0000000020000600 RDI: 00000000000000c8 [ 1387.528957][T16717] RBP: 00007fd982a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 1387.536906][T16717] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 1387.544852][T16717] R13: 0000000000000000 R14: 00007fd982b75fa0 R15: 00007ffd3da396e8 [ 1387.552821][T16717] [ 1387.994450][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.162611][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.214224][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.271811][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.362347][ T11] bridge_slave_1: left allmulticast mode [ 1388.368036][ T11] bridge_slave_1: left promiscuous mode [ 1388.384675][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.402835][ T11] bridge_slave_0: left allmulticast mode [ 1388.408547][ T11] bridge_slave_0: left promiscuous mode [ 1388.431997][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.515319][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.525227][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.535376][ T11] bond0 (unregistering): Released all slaves [ 1388.800850][ T11] hsr_slave_0: left promiscuous mode [ 1388.806727][ T11] hsr_slave_1: left promiscuous mode [ 1388.813928][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1388.821465][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.828995][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1388.836764][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.845393][ T11] veth1_macvtap: left promiscuous mode [ 1388.851104][ T11] veth0_macvtap: left promiscuous mode [ 1388.856627][ T11] veth1_vlan: left promiscuous mode [ 1388.861946][ T11] veth0_vlan: left promiscuous mode [ 1388.943377][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1388.978580][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1389.006951][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1389.006970][ T29] audit: type=1400 audit(1735523934.023:53424): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1389.038793][ T29] audit: type=1400 audit(1735523934.023:53425): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.060668][ T29] audit: type=1400 audit(1735523934.023:53426): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1389.084410][ T29] audit: type=1400 audit(1735523934.023:53427): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1389.108477][ T29] audit: type=1400 audit(1735523934.023:53428): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1389.427128][ T11] IPVS: stop unused estimator thread 0... [ 1389.727717][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.802240][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.852163][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.912022][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.030152][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.057695][ T29] audit: type=1400 audit(1735523935.073:53429): avc: denied { read } for pid=5172 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1390.080555][ T29] audit: type=1400 audit(1735523935.073:53430): avc: denied { search } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1390.102960][ T29] audit: type=1400 audit(1735523935.073:53431): avc: denied { append } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1390.126497][ T29] audit: type=1400 audit(1735523935.073:53432): avc: denied { append open } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1390.151045][ T29] audit: type=1400 audit(1735523935.073:53433): avc: denied { getattr } for pid=5172 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=15 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1390.175015][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.212264][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0