Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:35957' (ECDSA) to the list of known hosts. 2024/10/17 22:06:27 fuzzer started 2024/10/17 22:06:27 dialing manager at localhost:45639 syzkaller login: [ 54.446748] cgroup: Unknown subsys name 'net' [ 54.542074] cgroup: Unknown subsys name 'cpuset' [ 54.570736] cgroup: Unknown subsys name 'rlimit' 2024/10/17 22:06:48 syscalls: 2217 2024/10/17 22:06:48 code coverage: enabled 2024/10/17 22:06:48 comparison tracing: enabled 2024/10/17 22:06:48 extra coverage: enabled 2024/10/17 22:06:48 setuid sandbox: enabled 2024/10/17 22:06:48 namespace sandbox: enabled 2024/10/17 22:06:48 Android sandbox: enabled 2024/10/17 22:06:48 fault injection: enabled 2024/10/17 22:06:48 leak checking: enabled 2024/10/17 22:06:48 net packet injection: enabled 2024/10/17 22:06:48 net device setup: enabled 2024/10/17 22:06:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/17 22:06:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/17 22:06:48 USB emulation: enabled 2024/10/17 22:06:48 hci packet injection: enabled 2024/10/17 22:06:48 wifi device emulation: enabled 2024/10/17 22:06:48 802.15.4 emulation: enabled 2024/10/17 22:06:48 fetching corpus: 0, signal 0/2000 (executing program) 2024/10/17 22:06:48 fetching corpus: 39, signal 16759/20237 (executing program) 2024/10/17 22:06:48 fetching corpus: 89, signal 32671/37157 (executing program) 2024/10/17 22:06:48 fetching corpus: 139, signal 39074/44733 (executing program) 2024/10/17 22:06:48 fetching corpus: 187, signal 48634/55008 (executing program) 2024/10/17 22:06:48 fetching corpus: 237, signal 54920/61997 (executing program) 2024/10/17 22:06:49 fetching corpus: 286, signal 58164/66074 (executing program) 2024/10/17 22:06:49 fetching corpus: 336, signal 61552/70137 (executing program) 2024/10/17 22:06:49 fetching corpus: 386, signal 67613/76456 (executing program) 2024/10/17 22:06:49 fetching corpus: 436, signal 72020/81240 (executing program) 2024/10/17 22:06:49 fetching corpus: 485, signal 74552/84318 (executing program) 2024/10/17 22:06:49 fetching corpus: 535, signal 77120/87307 (executing program) 2024/10/17 22:06:49 fetching corpus: 585, signal 82643/92659 (executing program) 2024/10/17 22:06:50 fetching corpus: 635, signal 85784/96065 (executing program) 2024/10/17 22:06:50 fetching corpus: 685, signal 88177/98683 (executing program) 2024/10/17 22:06:50 fetching corpus: 735, signal 90016/100761 (executing program) 2024/10/17 22:06:50 fetching corpus: 785, signal 91775/102739 (executing program) 2024/10/17 22:06:50 fetching corpus: 835, signal 92937/104143 (executing program) 2024/10/17 22:06:50 fetching corpus: 885, signal 94879/106137 (executing program) 2024/10/17 22:06:50 fetching corpus: 935, signal 96390/107748 (executing program) 2024/10/17 22:06:51 fetching corpus: 985, signal 97748/109205 (executing program) 2024/10/17 22:06:51 fetching corpus: 1035, signal 100446/111520 (executing program) 2024/10/17 22:06:51 fetching corpus: 1084, signal 101511/112716 (executing program) 2024/10/17 22:06:51 fetching corpus: 1134, signal 102963/114137 (executing program) 2024/10/17 22:06:51 fetching corpus: 1184, signal 103949/115160 (executing program) 2024/10/17 22:06:51 fetching corpus: 1234, signal 105603/116634 (executing program) 2024/10/17 22:06:51 fetching corpus: 1284, signal 106249/117443 (executing program) 2024/10/17 22:06:52 fetching corpus: 1334, signal 107780/118700 (executing program) 2024/10/17 22:06:52 fetching corpus: 1384, signal 109154/119879 (executing program) 2024/10/17 22:06:52 fetching corpus: 1434, signal 110068/120763 (executing program) 2024/10/17 22:06:52 fetching corpus: 1484, signal 110883/121524 (executing program) 2024/10/17 22:06:52 fetching corpus: 1534, signal 111730/122283 (executing program) 2024/10/17 22:06:52 fetching corpus: 1584, signal 112844/123183 (executing program) 2024/10/17 22:06:52 fetching corpus: 1634, signal 113799/123925 (executing program) 2024/10/17 22:06:52 fetching corpus: 1684, signal 114735/124636 (executing program) 2024/10/17 22:06:53 fetching corpus: 1734, signal 115701/125323 (executing program) 2024/10/17 22:06:53 fetching corpus: 1784, signal 116465/125884 (executing program) 2024/10/17 22:06:53 fetching corpus: 1833, signal 117043/126408 (executing program) 2024/10/17 22:06:53 fetching corpus: 1883, signal 118476/127247 (executing program) 2024/10/17 22:06:53 fetching corpus: 1933, signal 119230/127802 (executing program) 2024/10/17 22:06:53 fetching corpus: 1983, signal 119866/128281 (executing program) 2024/10/17 22:06:53 fetching corpus: 2033, signal 121121/128920 (executing program) 2024/10/17 22:06:53 fetching corpus: 2083, signal 122106/129445 (executing program) 2024/10/17 22:06:54 fetching corpus: 2133, signal 123263/130025 (executing program) 2024/10/17 22:06:54 fetching corpus: 2183, signal 123810/130369 (executing program) 2024/10/17 22:06:54 fetching corpus: 2233, signal 125203/130946 (executing program) 2024/10/17 22:06:54 fetching corpus: 2283, signal 126525/131438 (executing program) 2024/10/17 22:06:54 fetching corpus: 2333, signal 127809/131875 (executing program) 2024/10/17 22:06:54 fetching corpus: 2383, signal 128428/132110 (executing program) 2024/10/17 22:06:54 fetching corpus: 2433, signal 129483/132413 (executing program) 2024/10/17 22:06:55 fetching corpus: 2482, signal 130135/132628 (executing program) 2024/10/17 22:06:55 fetching corpus: 2532, signal 130843/132834 (executing program) 2024/10/17 22:06:55 fetching corpus: 2582, signal 131517/133014 (executing program) 2024/10/17 22:06:55 fetching corpus: 2605, signal 131979/133123 (executing program) 2024/10/17 22:06:55 fetching corpus: 2605, signal 131979/133142 (executing program) 2024/10/17 22:06:55 fetching corpus: 2605, signal 131979/133160 (executing program) 2024/10/17 22:06:55 fetching corpus: 2605, signal 131979/133176 (executing program) 2024/10/17 22:06:55 fetching corpus: 2606, signal 131982/133200 (executing program) 2024/10/17 22:06:55 fetching corpus: 2607, signal 131999/133236 (executing program) 2024/10/17 22:06:55 fetching corpus: 2607, signal 131999/133252 (executing program) 2024/10/17 22:06:55 fetching corpus: 2607, signal 131999/133268 (executing program) 2024/10/17 22:06:55 fetching corpus: 2608, signal 132010/133303 (executing program) 2024/10/17 22:06:55 fetching corpus: 2608, signal 132010/133324 (executing program) 2024/10/17 22:06:55 fetching corpus: 2608, signal 132010/133346 (executing program) 2024/10/17 22:06:55 fetching corpus: 2608, signal 132010/133368 (executing program) 2024/10/17 22:06:55 fetching corpus: 2608, signal 132010/133393 (executing program) 2024/10/17 22:06:55 fetching corpus: 2608, signal 132010/133404 (executing program) 2024/10/17 22:06:55 fetching corpus: 2608, signal 132010/133404 (executing program) 2024/10/17 22:06:59 starting 8 fuzzer processes 22:06:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x24, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x9, 0x0, 0x0, 0x1, [@typed={0x4}, @generic='x']}]}, 0x24}], 0x1}, 0x0) 22:06:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/129, 0x81, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 22:06:59 executing program 2: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ocfs2={0xc}, 0x0) [ 85.324782] audit: type=1400 audit(1729202819.334:7): avc: denied { execmem } for pid=269 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:06:59 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x1) 22:06:59 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/warn_count', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/240, 0x3d, 0x0) 22:06:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote, 0x0, 0x4, [@local, @loopback, @local, @loopback]}, 0x20) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @remote}, 0x10) 22:06:59 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 22:06:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) accept4$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8912, &(0x7f0000000140)={@local, 0x7, r3}) [ 86.619492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.625770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.629976] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.643188] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.650994] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.653264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.694946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.699426] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.701873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.709770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.716826] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.720182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.800460] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.810281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.820601] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.822747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.824660] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.827034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.837045] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.845319] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.851876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.859911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.864186] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.870863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.904429] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.919997] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.925020] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.934007] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.946901] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.949377] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.951722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.960279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.962945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.980642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.989817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.991285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.997348] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.999112] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.000424] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.003152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.004749] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.012107] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.068062] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.072048] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.076000] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.082720] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.082778] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.103231] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.703983] Bluetooth: hci0: command tx timeout [ 88.768091] Bluetooth: hci1: command tx timeout [ 88.959626] Bluetooth: hci3: command tx timeout [ 88.962638] Bluetooth: hci2: command tx timeout [ 89.023785] Bluetooth: hci4: command tx timeout [ 89.087799] Bluetooth: hci5: command tx timeout [ 89.151649] Bluetooth: hci7: command tx timeout [ 89.215623] Bluetooth: hci6: command tx timeout [ 90.752616] Bluetooth: hci0: command tx timeout [ 90.815705] Bluetooth: hci1: command tx timeout [ 91.007619] Bluetooth: hci2: command tx timeout [ 91.008126] Bluetooth: hci3: command tx timeout [ 91.072564] Bluetooth: hci4: command tx timeout [ 91.137587] Bluetooth: hci5: command tx timeout [ 91.199665] Bluetooth: hci7: command tx timeout [ 91.263770] Bluetooth: hci6: command tx timeout [ 92.799586] Bluetooth: hci0: command tx timeout [ 92.863599] Bluetooth: hci1: command tx timeout [ 93.055808] Bluetooth: hci2: command tx timeout [ 93.056308] Bluetooth: hci3: command tx timeout [ 93.119955] Bluetooth: hci4: command tx timeout [ 93.183818] Bluetooth: hci5: command tx timeout [ 93.247910] Bluetooth: hci7: command tx timeout [ 93.312561] Bluetooth: hci6: command tx timeout [ 94.847659] Bluetooth: hci0: command tx timeout [ 94.911735] Bluetooth: hci1: command tx timeout [ 95.103681] Bluetooth: hci3: command tx timeout [ 95.104180] Bluetooth: hci2: command tx timeout [ 95.167617] Bluetooth: hci4: command tx timeout [ 95.232613] Bluetooth: hci5: command tx timeout [ 95.296538] Bluetooth: hci7: command tx timeout [ 95.359774] Bluetooth: hci6: command tx timeout [ 144.692774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.693529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.972022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.972830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.285855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.286791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.135296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.143580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.144982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.149016] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.156704] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.158241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.198461] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.201755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.205097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.213884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.215743] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.217323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.258473] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.263177] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.264107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.268156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.271749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.275029] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.276148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.280188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.281768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.284730] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.287665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.292023] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.411102] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.412855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.413742] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.419004] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.422671] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.428755] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.431427] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.434027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.454756] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.476155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.499362] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.511949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.513913] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.516936] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.522031] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.526929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.529983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.535823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.541008] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.543403] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.546850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.548015] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.549041] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.553967] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.231627] Bluetooth: hci0: command tx timeout [ 151.295557] Bluetooth: hci1: command tx timeout [ 151.360758] Bluetooth: hci2: command tx timeout [ 151.361443] Bluetooth: hci3: command tx timeout [ 151.551607] Bluetooth: hci7: command tx timeout [ 151.615602] Bluetooth: hci6: command tx timeout [ 151.616248] Bluetooth: hci4: command tx timeout [ 151.679621] Bluetooth: hci5: command tx timeout [ 153.280578] Bluetooth: hci0: command tx timeout [ 153.345509] Bluetooth: hci1: command tx timeout [ 153.408732] Bluetooth: hci3: command tx timeout [ 153.409185] Bluetooth: hci2: command tx timeout [ 153.600576] Bluetooth: hci7: command tx timeout [ 153.665529] Bluetooth: hci4: command tx timeout [ 153.665987] Bluetooth: hci6: command tx timeout [ 153.728566] Bluetooth: hci5: command tx timeout [ 155.328685] Bluetooth: hci0: command tx timeout [ 155.391735] Bluetooth: hci1: command tx timeout [ 155.456574] Bluetooth: hci2: command tx timeout [ 155.457028] Bluetooth: hci3: command tx timeout [ 155.649328] Bluetooth: hci7: command tx timeout [ 155.712634] Bluetooth: hci6: command tx timeout [ 155.713101] Bluetooth: hci4: command tx timeout [ 155.775729] Bluetooth: hci5: command tx timeout [ 157.376580] Bluetooth: hci0: command tx timeout [ 157.440541] Bluetooth: hci1: command tx timeout [ 157.503580] Bluetooth: hci3: command tx timeout [ 157.504017] Bluetooth: hci2: command tx timeout [ 157.697542] Bluetooth: hci7: command tx timeout [ 157.759558] Bluetooth: hci4: command tx timeout [ 157.760007] Bluetooth: hci6: command tx timeout [ 157.824544] Bluetooth: hci5: command tx timeout [ 211.348375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.352958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.356164] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.363849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.367096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.369873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.592873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.597736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.599754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.604175] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.607003] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.609315] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.735530] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.738690] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.740692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.745022] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.747898] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.750056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.814788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.820853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.826937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.839125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.866540] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.870812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.883070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.911005] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.914161] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.919833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.926204] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.926861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.936087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.939136] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 211.950536] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.955095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 211.970900] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.974184] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.974726] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.978931] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.981727] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 211.985866] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.988892] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 211.990271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.998283] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.008923] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.011119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.068158] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.083732] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.086180] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.440309] Bluetooth: hci0: command tx timeout [ 213.632850] Bluetooth: hci1: command tx timeout [ 213.824541] Bluetooth: hci2: command tx timeout [ 213.952580] Bluetooth: hci3: command tx timeout [ 214.015581] Bluetooth: hci5: command tx timeout [ 214.079637] Bluetooth: hci7: command tx timeout [ 214.080571] Bluetooth: hci4: command tx timeout [ 214.143554] Bluetooth: hci6: command tx timeout [ 215.487563] Bluetooth: hci0: command tx timeout [ 215.679562] Bluetooth: hci1: command tx timeout [ 215.873256] Bluetooth: hci2: command tx timeout [ 216.000523] Bluetooth: hci3: command tx timeout [ 216.064630] Bluetooth: hci5: command tx timeout [ 216.129577] Bluetooth: hci4: command tx timeout [ 216.130004] Bluetooth: hci7: command tx timeout [ 216.191586] Bluetooth: hci6: command tx timeout [ 217.535585] Bluetooth: hci0: command tx timeout [ 217.728562] Bluetooth: hci1: command tx timeout [ 217.920054] Bluetooth: hci2: command tx timeout [ 218.048805] Bluetooth: hci3: command tx timeout [ 218.111535] Bluetooth: hci5: command tx timeout [ 218.176616] Bluetooth: hci7: command tx timeout [ 218.177027] Bluetooth: hci4: command tx timeout [ 218.239547] Bluetooth: hci6: command tx timeout [ 219.584957] Bluetooth: hci0: command tx timeout [ 219.775983] Bluetooth: hci1: command tx timeout [ 219.968554] Bluetooth: hci2: command tx timeout [ 220.096535] Bluetooth: hci3: command tx timeout [ 220.160529] Bluetooth: hci5: command tx timeout [ 220.224157] Bluetooth: hci4: command tx timeout [ 220.224655] Bluetooth: hci7: command tx timeout [ 220.288543] Bluetooth: hci6: command tx timeout [ 265.813229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.814157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.075542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.076211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.577007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.577699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.817032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.817940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.005681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.021381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.022196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.143965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.144653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.262783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.263408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.389217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.389919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.548554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.549201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.591675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.592302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.678389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.679099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.795992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.796919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.901419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.902120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.115065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.116124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.145624] audit: type=1400 audit(1729203002.154:8): avc: denied { open } for pid=10736 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 268.150229] audit: type=1400 audit(1729203002.154:9): avc: denied { kernel } for pid=10736 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 268.302683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.303323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.318230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.318882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:10:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x24, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x9, 0x0, 0x0, 0x1, [@typed={0x4}, @generic='x']}]}, 0x24}], 0x1}, 0x0) 22:10:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/129, 0x81, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 22:10:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x1) 22:10:03 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 22:10:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) accept4$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8912, &(0x7f0000000140)={@local, 0x7, r3}) 22:10:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote, 0x0, 0x4, [@local, @loopback, @local, @loopback]}, 0x20) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @remote}, 0x10) 22:10:03 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/warn_count', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/240, 0x3d, 0x0) 22:10:03 executing program 2: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ocfs2={0xc}, 0x0) [ 269.114866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 22:10:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x1) 22:10:03 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/warn_count', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/240, 0x3d, 0x0) 22:10:03 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 22:10:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x24, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x9, 0x0, 0x0, 0x1, [@typed={0x4}, @generic='x']}]}, 0x24}], 0x1}, 0x0) 22:10:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/129, 0x81, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 22:10:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote, 0x0, 0x4, [@local, @loopback, @local, @loopback]}, 0x20) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @remote}, 0x10) 22:10:03 executing program 2: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ocfs2={0xc}, 0x0) 22:10:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) accept4$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8912, &(0x7f0000000140)={@local, 0x7, r3}) [ 269.325293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 22:10:03 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000001140)=0x1) 22:10:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) accept4$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x1c, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8912, &(0x7f0000000140)={@local, 0x7, r3}) 22:10:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/129, 0x81, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 22:10:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x24, 0x6d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x9, 0x0, 0x0, 0x1, [@typed={0x4}, @generic='x']}]}, 0x24}], 0x1}, 0x0) 22:10:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote, 0x0, 0x4, [@local, @loopback, @local, @loopback]}, 0x20) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @remote}, 0x10) 22:10:03 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 22:10:03 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/warn_count', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/240, 0x3d, 0x0) 22:10:03 executing program 2: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=@ocfs2={0xc}, 0x0) [ 269.592993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 22:10:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote, 0x0, 0x4, [@local, @loopback, @local, @loopback]}, 0x20) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @remote}, 0x10) 22:10:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/129, 0x81, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 22:10:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 22:10:03 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/25, 0x19, 0xff) 22:10:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22:10:03 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000480)={0x1c, 0x76, 0x101, 0x0, 0x0, "", [@nested={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, 0x1c}], 0x1}, 0x0) 22:10:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='\x00', 0x89801) [ 269.903472] hrtimer: interrupt took 33493 ns 22:10:03 executing program 1: io_setup(0xb, &(0x7f0000000000)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r0, 0x1, &(0x7f00000010c0)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:10:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) [ 270.023847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 270.039219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 22:10:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 22:10:04 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000480)={0x1c, 0x76, 0x101, 0x0, 0x0, "", [@nested={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, 0x1c}], 0x1}, 0x0) 22:10:04 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/25, 0x19, 0xff) 22:10:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/129, 0x81, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 22:10:04 executing program 1: io_setup(0xb, &(0x7f0000000000)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r0, 0x1, &(0x7f00000010c0)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 270.277634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 22:10:04 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000480)={0x1c, 0x76, 0x101, 0x0, 0x0, "", [@nested={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, 0x1c}], 0x1}, 0x0) 22:10:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/129, 0x81, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) [ 270.505069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 22:10:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote, 0x0, 0x4, [@local, @loopback, @local, @loopback]}, 0x20) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @remote}, 0x10) 22:10:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='\x00', 0x89801) 22:10:06 executing program 1: io_setup(0xb, &(0x7f0000000000)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r0, 0x1, &(0x7f00000010c0)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:10:06 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000480)={0x1c, 0x76, 0x101, 0x0, 0x0, "", [@nested={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, 0x1c}], 0x1}, 0x0) 22:10:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='\x00', 0x89801) 22:10:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='\x00', 0x89801) 22:10:06 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/25, 0x19, 0xff) 22:10:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22:10:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000004b80)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote, 0x0, 0x4, [@local, @loopback, @local, @loopback]}, 0x20) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @remote}, 0x10) 22:10:07 executing program 1: io_setup(0xb, &(0x7f0000000000)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r0, 0x1, &(0x7f00000010c0)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:10:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='\x00', 0x89801) 22:10:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='\x00', 0x89801) 22:10:07 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22:10:07 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/25, 0x19, 0xff) 22:10:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='\x00', 0x89801) 22:10:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22:10:07 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='\x00', 0x89801) 22:10:07 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='\x00', 0x89801) 22:10:07 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 273.789856] ------------[ cut here ]------------ [ 273.790807] kmem_cache of name '9p-fcall-cache-(null)' already exists [ 273.791939] WARNING: CPU: 0 PID: 10911 at mm/slab_common.c:107 __kmem_cache_create_args+0xaf/0x370 [ 273.793170] Modules linked in: [ 273.793646] CPU: 0 UID: 0 PID: 10911 Comm: syz-executor.4 Not tainted 6.12.0-rc3-next-20241016 #1 [ 273.795053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 273.797111] RIP: 0010:__kmem_cache_create_args+0xaf/0x370 [ 273.798607] Code: 98 48 3d 30 98 cc 85 74 25 48 8b 7b 60 4c 89 e6 e8 76 ee 09 03 85 c0 75 e0 90 48 c7 c7 d8 35 6e 85 4c 89 e6 e8 22 29 a4 ff 90 <0f> 0b 90 90 be 20 00 00 00 4c 89 e7 e8 f0 ef 09 03 48 85 c0 0f 85 [ 273.803082] RSP: 0018:ffff88803e03f930 EFLAGS: 00010286 [ 273.804394] RAX: 0000000000000000 RBX: ffff88800bfe5140 RCX: ffffc90005e16000 [ 273.806276] RDX: 0000000000040000 RSI: ffffffff8118b52f RDI: 0000000000000001 [ 273.807206] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1007c07ed7 [ 273.808172] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c594b40 [ 273.809098] R13: 0000000000020018 R14: ffff88803e03fa10 R15: 0000000000000000 [ 273.810025] FS: 00007fddc8099700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 273.811074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.811854] CR2: 0000000020001000 CR3: 0000000016360000 CR4: 0000000000350ef0 [ 273.812792] Call Trace: [ 273.813143] [ 273.813500] ? __warn+0xea/0x370 [ 273.814012] ? __kmem_cache_create_args+0xaf/0x370 [ 273.814730] ? report_bug+0x2f5/0x3f0 [ 273.815292] ? __kmem_cache_create_args+0xaf/0x370 [ 273.815995] ? __kmem_cache_create_args+0xb0/0x370 [ 273.816715] ? handle_bug+0xe5/0x180 [ 273.817245] ? exc_invalid_op+0x35/0x80 [ 273.817839] ? asm_exc_invalid_op+0x1a/0x20 [ 273.818512] ? __warn_printk+0x17f/0x220 [ 273.819090] ? __kmem_cache_create_args+0xaf/0x370 [ 273.819815] p9_client_create+0xde4/0x11a0 [ 273.820424] ? lock_acquire+0x32/0xc0 [ 273.821030] ? __pfx_p9_client_create+0x10/0x10 [ 273.821715] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 273.822483] ? srso_return_thunk+0x5/0x5f [ 273.823091] ? __kasan_kmalloc+0x7f/0x90 [ 273.823712] ? srso_return_thunk+0x5/0x5f [ 273.824313] ? trace_kmalloc+0x24/0xc0 [ 273.824895] ? lockdep_init_map_type+0x2cb/0x7b0 [ 273.825557] ? vfs_get_tree+0x97/0x380 [ 273.826095] ? path_mount+0x13b2/0x1ec0 [ 273.826697] ? srso_return_thunk+0x5/0x5f [ 273.827290] ? __raw_spin_lock_init+0x3a/0x110 [ 273.827956] v9fs_session_init+0x1e0/0x17b0 [ 273.828602] ? srso_return_thunk+0x5/0x5f [ 273.829198] ? lock_acquire+0x32/0xc0 [ 273.829819] ? __pfx_v9fs_session_init+0x10/0x10 [ 273.830486] ? srso_return_thunk+0x5/0x5f [ 273.831081] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 273.831842] ? srso_return_thunk+0x5/0x5f [ 273.832503] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 273.833193] ? srso_return_thunk+0x5/0x5f [ 273.833828] ? __create_object+0x59/0x80 [ 273.834379] ? srso_return_thunk+0x5/0x5f [ 273.835021] ? trace_kmalloc+0x24/0xc0 [ 273.835587] ? srso_return_thunk+0x5/0x5f [ 273.836186] ? __kmalloc_cache_noprof+0x1b4/0x3e0 [ 273.836878] ? srso_return_thunk+0x5/0x5f [ 273.837513] ? cred_has_capability.isra.0+0x14d/0x2b0 [ 273.838214] ? srso_return_thunk+0x5/0x5f [ 273.838852] v9fs_mount+0xbd/0x9b0 [ 273.839355] ? __x86_indirect_jump_thunk_r13+0x3/0x20 [ 273.840112] ? __pfx_v9fs_mount+0x10/0x10 [ 273.840733] ? srso_return_thunk+0x5/0x5f [ 273.841319] ? cap_capable+0x1b5/0x220 [ 273.841912] ? __pfx_v9fs_mount+0x10/0x10 [ 273.842519] legacy_get_tree+0x109/0x220 [ 273.843110] vfs_get_tree+0x97/0x380 [ 273.843666] ? srso_return_thunk+0x5/0x5f [ 273.844266] path_mount+0x13b2/0x1ec0 [ 273.844845] ? srso_return_thunk+0x5/0x5f [ 273.845430] ? kmem_cache_free+0x138/0x470 [ 273.846057] ? __pfx_path_mount+0x10/0x10 [ 273.846664] ? getname_flags.part.0+0x1c6/0x550 [ 273.847317] ? srso_return_thunk+0x5/0x5f [ 273.847948] ? putname+0x12a/0x170 [ 273.848517] __x64_sys_mount+0x283/0x300 [ 273.849078] ? __pfx___x64_sys_mount+0x10/0x10 [ 273.849749] do_syscall_64+0xbf/0x1d0 [ 273.850259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.850975] RIP: 0033:0x7fddcab44b19 [ 273.851495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 273.853622] RSP: 002b:00007fddc8099188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 273.854580] RAX: ffffffffffffffda RBX: 00007fddcac58020 RCX: 00007fddcab44b19 [ 273.855429] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 273.856405] RBP: 00007fddcab9ef6d R08: 00000000200001c0 R09: 0000000000000000 [ 273.857290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.858185] R13: 00007ffe35c45b1f R14: 00007fddc8099300 R15: 0000000000022000 [ 273.859103] [ 273.859416] irq event stamp: 2083 [ 273.859883] hardirqs last enabled at (2095): [] __up_console_sem+0x78/0x80 [ 273.860989] hardirqs last disabled at (2106): [] __up_console_sem+0x5d/0x80 [ 273.862078] softirqs last enabled at (2028): [] handle_softirqs+0x50c/0x770 [ 273.863147] softirqs last disabled at (2001): [] irq_exit_rcu+0x94/0xc0 [ 273.864185] ---[ end trace 0000000000000000 ]--- 22:10:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22:10:08 executing program 6: io_setup(0xb, &(0x7f0000000000)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r0, 0x1, &(0x7f00000010c0)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:10:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) open_tree(0xffffffffffffff9c, &(0x7f0000001080)='\x00', 0x89801) 22:10:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) [ 274.994304] ------------[ cut here ]------------ [ 274.995594] kmem_cache of name '9p-fcall-cache-(null)' already exists [ 274.997508] WARNING: CPU: 0 PID: 10923 at mm/slab_common.c:107 __kmem_cache_create_args+0xaf/0x370 [ 274.998820] Modules linked in: [ 274.999519] CPU: 0 UID: 0 PID: 10923 Comm: syz-executor.4 Tainted: G W 6.12.0-rc3-next-20241016 #1 [ 275.000891] Tainted: [W]=WARN [ 275.001508] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 275.002690] RIP: 0010:__kmem_cache_create_args+0xaf/0x370 [ 275.003544] Code: 98 48 3d 30 98 cc 85 74 25 48 8b 7b 60 4c 89 e6 e8 76 ee 09 03 85 c0 75 e0 90 48 c7 c7 d8 35 6e 85 4c 89 e6 e8 22 29 a4 ff 90 <0f> 0b 90 90 be 20 00 00 00 4c 89 e7 e8 f0 ef 09 03 48 85 c0 0f 85 [ 275.005993] RSP: 0018:ffff88802fb17930 EFLAGS: 00010286 [ 275.007068] RAX: 0000000000000000 RBX: ffff88800ce60280 RCX: ffffc90005612000 [ 275.008062] RDX: 0000000000040000 RSI: ffffffff8118b52f RDI: 0000000000000001 [ 275.009200] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1005f62ed7 [ 275.010337] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c344380 [ 275.011405] R13: 0000000000020018 R14: ffff88802fb17a10 R15: 0000000000000000 [ 275.012427] FS: 00007fddc80ba700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 275.042714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.043727] CR2: 0000000020001000 CR3: 000000003afba000 CR4: 0000000000350ef0 [ 275.044909] Call Trace: [ 275.045449] [ 275.045987] ? __warn+0xea/0x370 [ 275.046779] ? __kmem_cache_create_args+0xaf/0x370 [ 275.047580] ? report_bug+0x2f5/0x3f0 [ 275.048374] ? __kmem_cache_create_args+0xaf/0x370 [ 275.049213] ? __kmem_cache_create_args+0xb0/0x370 [ 275.050003] ? handle_bug+0xe5/0x180 [ 275.050764] ? exc_invalid_op+0x35/0x80 [ 275.051572] ? asm_exc_invalid_op+0x1a/0x20 [ 275.052506] ? __warn_printk+0x17f/0x220 [ 275.053349] ? __kmem_cache_create_args+0xaf/0x370 [ 275.054366] p9_client_create+0xde4/0x11a0 [ 275.055208] ? lock_acquire+0x32/0xc0 [ 275.056000] ? __pfx_p9_client_create+0x10/0x10 [ 275.056920] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 275.057924] ? srso_return_thunk+0x5/0x5f [ 275.058629] ? __kasan_kmalloc+0x7f/0x90 [ 275.059362] ? srso_return_thunk+0x5/0x5f [ 275.060156] ? trace_kmalloc+0x24/0xc0 [ 275.060863] ? lockdep_init_map_type+0x2cb/0x7b0 [ 275.061602] ? vfs_get_tree+0x97/0x380 [ 275.062405] ? path_mount+0x13b2/0x1ec0 [ 275.063244] ? srso_return_thunk+0x5/0x5f [ 275.063972] ? __raw_spin_lock_init+0x3a/0x110 [ 275.064817] v9fs_session_init+0x1e0/0x17b0 [ 275.065738] ? srso_return_thunk+0x5/0x5f [ 275.066536] ? lock_acquire+0x32/0xc0 [ 275.067341] ? __pfx_v9fs_session_init+0x10/0x10 [ 275.068171] ? srso_return_thunk+0x5/0x5f [ 275.069135] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 275.069986] ? srso_return_thunk+0x5/0x5f [ 275.070819] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 275.071944] ? srso_return_thunk+0x5/0x5f [ 275.072796] ? __create_object+0x59/0x80 [ 275.073593] ? srso_return_thunk+0x5/0x5f [ 275.074399] ? trace_kmalloc+0x24/0xc0 [ 275.075109] ? srso_return_thunk+0x5/0x5f [ 275.075932] ? __kmalloc_cache_noprof+0x1b4/0x3e0 [ 275.076899] ? srso_return_thunk+0x5/0x5f [ 275.077634] ? cred_has_capability.isra.0+0x14d/0x2b0 [ 275.078527] ? srso_return_thunk+0x5/0x5f [ 275.079360] v9fs_mount+0xbd/0x9b0 [ 275.080101] ? selinux_sb_eat_lsm_opts+0x73/0x6c0 [ 275.081151] ? __pfx_v9fs_mount+0x10/0x10 [ 275.081996] ? srso_return_thunk+0x5/0x5f [ 275.082819] ? cap_capable+0x1b5/0x220 [ 275.083546] ? __pfx_v9fs_mount+0x10/0x10 [ 275.084308] legacy_get_tree+0x109/0x220 [ 275.085167] vfs_get_tree+0x97/0x380 [ 275.085968] ? srso_return_thunk+0x5/0x5f [ 275.086797] path_mount+0x13b2/0x1ec0 [ 275.087564] ? srso_return_thunk+0x5/0x5f [ 275.088423] ? kmem_cache_free+0x138/0x470 [ 275.089313] ? __pfx_path_mount+0x10/0x10 [ 275.090183] ? getname_flags.part.0+0x1c6/0x550 [ 275.090980] ? srso_return_thunk+0x5/0x5f [ 275.091825] ? putname+0x12a/0x170 [ 275.092578] __x64_sys_mount+0x283/0x300 [ 275.093448] ? __pfx___x64_sys_mount+0x10/0x10 [ 275.094402] do_syscall_64+0xbf/0x1d0 [ 275.095242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.096148] RIP: 0033:0x7fddcab44b19 [ 275.096888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 275.099149] RSP: 002b:00007fddc80ba188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.100280] RAX: ffffffffffffffda RBX: 00007fddcac57f60 RCX: 00007fddcab44b19 [ 275.101316] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 275.102416] RBP: 00007fddcab9ef6d R08: 00000000200001c0 R09: 0000000000000000 [ 275.103606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.104538] R13: 00007ffe35c45b1f R14: 00007fddc80ba300 R15: 0000000000022000 [ 275.105867] [ 275.106426] irq event stamp: 18873 [ 275.107077] hardirqs last enabled at (18897): [] __up_console_sem+0x78/0x80 [ 275.108416] hardirqs last disabled at (18926): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 275.109795] softirqs last enabled at (17844): [] handle_softirqs+0x50c/0x770 [ 275.111047] softirqs last disabled at (17823): [] irq_exit_rcu+0x94/0xc0 [ 275.112308] ---[ end trace 0000000000000000 ]--- 22:10:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22:10:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22:10:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, 0x18, 0x0, 0x101, 0x0, 0x0, {0x2}, [@typed={0x7, 0x0, 0x0, 0x0, @str='{;\x00'}, @nested={0x8, 0x7, 0x0, 0x1, [@generic="64a9d54e"]}]}, 0x24}}, 0x0) 22:10:09 executing program 5: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff8000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 22:10:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)='\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5c3b00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r1, r0, 0x0, 0x10000) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @mcast1, 0x8}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/210, 0xd2, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 22:10:09 executing program 1: r0 = perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{}, {r1}, {r0}], 0x3, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) 22:10:09 executing program 6: io_setup(0xb, &(0x7f0000000000)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r0, 0x1, &(0x7f00000010c0)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:10:09 executing program 3: r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='defcontext', &(0x7f0000000440)='unconfined_u', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) [ 275.518099] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 275.538531] audit: type=1400 audit(1729203009.547:10): avc: denied { execheap } for pid=10936 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 275.567081] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 22:10:09 executing program 3: r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='defcontext', &(0x7f0000000440)='unconfined_u', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 22:10:09 executing program 5: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff8000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) [ 275.740054] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 275.804537] ------------[ cut here ]------------ [ 275.805302] kmem_cache of name '9p-fcall-cache-(null)' already exists [ 275.806521] WARNING: CPU: 0 PID: 10955 at mm/slab_common.c:107 __kmem_cache_create_args+0xaf/0x370 [ 275.807832] Modules linked in: [ 275.808333] CPU: 0 UID: 0 PID: 10955 Comm: syz-executor.2 Tainted: G W 6.12.0-rc3-next-20241016 #1 [ 275.809811] Tainted: [W]=WARN [ 275.810265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 275.811471] RIP: 0010:__kmem_cache_create_args+0xaf/0x370 [ 275.812290] Code: 98 48 3d 30 98 cc 85 74 25 48 8b 7b 60 4c 89 e6 e8 76 ee 09 03 85 c0 75 e0 90 48 c7 c7 d8 35 6e 85 4c 89 e6 e8 22 29 a4 ff 90 <0f> 0b 90 90 be 20 00 00 00 4c 89 e7 e8 f0 ef 09 03 48 85 c0 0f 85 [ 275.814745] RSP: 0018:ffff8880155ff930 EFLAGS: 00010286 [ 275.815555] RAX: 0000000000000000 RBX: ffff88800bfe5500 RCX: ffffc9000a83b000 [ 275.816602] RDX: 0000000000040000 RSI: ffffffff8118b52f RDI: 0000000000000001 [ 275.817644] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1002abfed7 [ 275.818674] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800b6f9480 [ 275.819710] R13: 0000000000020018 R14: ffff8880155ffa10 R15: 0000000000000000 [ 275.820767] FS: 00007f19aff34700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 275.821913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.822779] CR2: 0000000020001000 CR3: 000000000d2c4000 CR4: 0000000000350ef0 [ 275.823822] Call Trace: [ 275.824218] [ 275.824618] ? __warn+0xea/0x370 [ 275.825178] ? __kmem_cache_create_args+0xaf/0x370 [ 275.825976] ? report_bug+0x2f5/0x3f0 [ 275.826641] ? __kmem_cache_create_args+0xaf/0x370 [ 275.827377] ? __kmem_cache_create_args+0xb0/0x370 [ 275.828171] ? handle_bug+0xe5/0x180 [ 275.828827] ? exc_invalid_op+0x35/0x80 [ 275.829485] ? asm_exc_invalid_op+0x1a/0x20 [ 275.830189] ? __warn_printk+0x17f/0x220 [ 275.830879] ? __kmem_cache_create_args+0xaf/0x370 [ 275.831800] p9_client_create+0xde4/0x11a0 [ 275.836245] ? lock_acquire+0x32/0xc0 [ 275.839880] ? __pfx_p9_client_create+0x10/0x10 [ 275.840889] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 275.841914] ? srso_return_thunk+0x5/0x5f [ 275.842722] ? __kasan_kmalloc+0x7f/0x90 [ 275.843508] ? srso_return_thunk+0x5/0x5f [ 275.844257] ? trace_kmalloc+0x24/0xc0 [ 275.844975] ? lockdep_init_map_type+0x2cb/0x7b0 [ 275.845801] ? vfs_get_tree+0x97/0x380 [ 275.846537] ? path_mount+0x13b2/0x1ec0 [ 275.847236] ? srso_return_thunk+0x5/0x5f [ 275.848033] ? __raw_spin_lock_init+0x3a/0x110 [ 275.848883] v9fs_session_init+0x1e0/0x17b0 [ 275.849685] ? srso_return_thunk+0x5/0x5f [ 275.850427] ? lock_acquire+0x32/0xc0 [ 275.851180] ? __pfx_v9fs_session_init+0x10/0x10 [ 275.852017] ? srso_return_thunk+0x5/0x5f [ 275.852816] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 275.853763] ? srso_return_thunk+0x5/0x5f [ 275.854552] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 275.855407] ? srso_return_thunk+0x5/0x5f [ 275.856212] ? __create_object+0x59/0x80 [ 275.856949] ? srso_return_thunk+0x5/0x5f [ 275.857746] ? trace_kmalloc+0x24/0xc0 [ 275.858400] ? srso_return_thunk+0x5/0x5f [ 275.859204] ? __kmalloc_cache_noprof+0x1b4/0x3e0 [ 275.860060] ? srso_return_thunk+0x5/0x5f [ 275.860866] ? cred_has_capability.isra.0+0x14d/0x2b0 [ 275.861795] ? srso_return_thunk+0x5/0x5f [ 275.862626] v9fs_mount+0xbd/0x9b0 [ 275.863256] ? __x86_indirect_jump_thunk_r13+0x3/0x20 [ 275.864214] ? __pfx_v9fs_mount+0x10/0x10 [ 275.864998] ? srso_return_thunk+0x5/0x5f [ 275.865796] ? cap_capable+0x1b5/0x220 [ 275.866547] ? __pfx_v9fs_mount+0x10/0x10 [ 275.867261] legacy_get_tree+0x109/0x220 [ 275.868056] vfs_get_tree+0x97/0x380 [ 275.868769] ? srso_return_thunk+0x5/0x5f [ 275.869595] path_mount+0x13b2/0x1ec0 [ 275.870285] ? srso_return_thunk+0x5/0x5f [ 275.871085] ? kmem_cache_free+0x138/0x470 [ 275.871880] ? __pfx_path_mount+0x10/0x10 [ 275.872671] ? getname_flags.part.0+0x1c6/0x550 [ 275.873550] ? srso_return_thunk+0x5/0x5f [ 275.874289] ? putname+0x12a/0x170 [ 275.875011] __x64_sys_mount+0x283/0x300 [ 275.875800] ? __pfx___x64_sys_mount+0x10/0x10 [ 275.876860] do_syscall_64+0xbf/0x1d0 [ 275.877568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.878432] RIP: 0033:0x7f19b2a00b19 [ 275.879088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 275.881781] RSP: 002b:00007f19aff34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.883016] RAX: ffffffffffffffda RBX: 00007f19b2b140e0 RCX: 00007f19b2a00b19 [ 275.884148] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 275.885328] RBP: 00007f19b2a5af6d R08: 00000000200001c0 R09: 0000000000000000 [ 275.886534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.887649] R13: 00007fff1d08fcbf R14: 00007f19aff34300 R15: 0000000000022000 [ 275.888971] [ 275.889511] irq event stamp: 2833 [ 275.890185] hardirqs last enabled at (2843): [] __up_console_sem+0x78/0x80 [ 275.891909] hardirqs last disabled at (2854): [] __up_console_sem+0x5d/0x80 [ 275.893569] softirqs last enabled at (2484): [] handle_softirqs+0x50c/0x770 [ 275.895354] softirqs last disabled at (2479): [] irq_exit_rcu+0x94/0xc0 [ 275.897026] ---[ end trace 0000000000000000 ]--- 22:10:09 executing program 6: io_setup(0xb, &(0x7f0000000000)=0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) io_submit(r0, 0x1, &(0x7f00000010c0)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:10:10 executing program 3: r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='defcontext', &(0x7f0000000440)='unconfined_u', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) [ 276.275055] ------------[ cut here ]------------ [ 276.276426] kmem_cache of name '9p-fcall-cache-(null)' already exists [ 276.279069] WARNING: CPU: 0 PID: 10957 at mm/slab_common.c:107 __kmem_cache_create_args+0xaf/0x370 [ 276.281661] Modules linked in: [ 276.283081] CPU: 0 UID: 0 PID: 10957 Comm: syz-executor.4 Tainted: G W 6.12.0-rc3-next-20241016 #1 [ 276.285931] Tainted: [W]=WARN [ 276.287035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 276.289246] RIP: 0010:__kmem_cache_create_args+0xaf/0x370 [ 276.290949] Code: 98 48 3d 30 98 cc 85 74 25 48 8b 7b 60 4c 89 e6 e8 76 ee 09 03 85 c0 75 e0 90 48 c7 c7 d8 35 6e 85 4c 89 e6 e8 22 29 a4 ff 90 <0f> 0b 90 90 be 20 00 00 00 4c 89 e7 e8 f0 ef 09 03 48 85 c0 0f 85 [ 276.295073] RSP: 0018:ffff88803d797930 EFLAGS: 00010286 [ 276.296741] RAX: 0000000000000000 RBX: ffff88800ce603c0 RCX: ffffc90006c1d000 [ 276.298695] RDX: 0000000000040000 RSI: ffffffff8118b52f RDI: 0000000000000001 [ 276.300672] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1007af2ed7 [ 276.302765] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888015d740c0 [ 276.304272] R13: 0000000000020018 R14: ffff88803d797a10 R15: 0000000000000000 [ 276.306003] FS: 00007fddc8057700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 276.307913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.309782] CR2: 0000001b31320000 CR3: 0000000016360000 CR4: 0000000000350ef0 [ 276.311768] Call Trace: [ 276.312366] [ 276.313428] ? __warn+0xea/0x370 [ 276.315171] ? __kmem_cache_create_args+0xaf/0x370 [ 276.316700] ? report_bug+0x2f5/0x3f0 [ 276.318017] ? __kmem_cache_create_args+0xaf/0x370 [ 276.319590] ? __kmem_cache_create_args+0xb0/0x370 [ 276.321162] ? handle_bug+0xe5/0x180 [ 276.322411] ? exc_invalid_op+0x35/0x80 [ 276.324197] ? asm_exc_invalid_op+0x1a/0x20 [ 276.325693] ? __warn_printk+0x17f/0x220 [ 276.327062] ? __kmem_cache_create_args+0xaf/0x370 [ 276.328608] p9_client_create+0xde4/0x11a0 [ 276.329826] ? lock_acquire+0x32/0xc0 [ 276.331103] ? __pfx_p9_client_create+0x10/0x10 22:10:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, 0x18, 0x0, 0x101, 0x0, 0x0, {0x2}, [@typed={0x7, 0x0, 0x0, 0x0, @str='{;\x00'}, @nested={0x8, 0x7, 0x0, 0x1, [@generic="64a9d54e"]}]}, 0x24}}, 0x0) [ 276.332638] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 276.334642] ? srso_return_thunk+0x5/0x5f [ 276.336740] ? __kasan_kmalloc+0x7f/0x90 [ 276.337997] ? srso_return_thunk+0x5/0x5f [ 276.339285] ? trace_kmalloc+0x24/0xc0 [ 276.340569] ? lockdep_init_map_type+0x2cb/0x7b0 [ 276.341938] ? vfs_get_tree+0x97/0x380 [ 276.343278] ? path_mount+0x13b2/0x1ec0 [ 276.348659] ? srso_return_thunk+0x5/0x5f [ 276.352342] ? __raw_spin_lock_init+0x3a/0x110 [ 276.353410] v9fs_session_init+0x1e0/0x17b0 [ 276.355044] ? srso_return_thunk+0x5/0x5f [ 276.356104] ? lock_acquire+0x32/0xc0 [ 276.357247] ? __pfx_v9fs_session_init+0x10/0x10 [ 276.358385] ? srso_return_thunk+0x5/0x5f [ 276.359359] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 276.360830] ? srso_return_thunk+0x5/0x5f [ 276.361919] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 276.363049] ? srso_return_thunk+0x5/0x5f [ 276.364164] ? __create_object+0x59/0x80 [ 276.365108] ? srso_return_thunk+0x5/0x5f [ 276.366130] ? trace_kmalloc+0x24/0xc0 [ 276.367071] ? srso_return_thunk+0x5/0x5f [ 276.368093] ? __kmalloc_cache_noprof+0x1b4/0x3e0 [ 276.369191] ? srso_return_thunk+0x5/0x5f [ 276.370074] ? cred_has_capability.isra.0+0x14d/0x2b0 [ 276.371052] ? srso_return_thunk+0x5/0x5f [ 276.371931] v9fs_mount+0xbd/0x9b0 [ 276.372691] ? __x86_indirect_jump_thunk_r13+0x3/0x20 [ 276.373689] ? __pfx_v9fs_mount+0x10/0x10 [ 276.374427] ? srso_return_thunk+0x5/0x5f [ 276.375295] ? cap_capable+0x1b5/0x220 [ 276.376168] ? __pfx_v9fs_mount+0x10/0x10 [ 276.376964] legacy_get_tree+0x109/0x220 [ 276.377829] vfs_get_tree+0x97/0x380 [ 276.378586] ? srso_return_thunk+0x5/0x5f [ 276.379337] path_mount+0x13b2/0x1ec0 [ 276.380134] ? srso_return_thunk+0x5/0x5f [ 276.381000] ? kmem_cache_free+0x138/0x470 [ 276.381801] ? __pfx_path_mount+0x10/0x10 [ 276.382627] ? getname_flags.part.0+0x1c6/0x550 [ 276.383585] ? srso_return_thunk+0x5/0x5f [ 276.384382] ? putname+0x12a/0x170 [ 276.385108] __x64_sys_mount+0x283/0x300 [ 276.385928] ? __pfx___x64_sys_mount+0x10/0x10 [ 276.386843] do_syscall_64+0xbf/0x1d0 [ 276.387545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.388514] RIP: 0033:0x7fddcab44b19 [ 276.389171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 22:10:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, 0x18, 0x0, 0x101, 0x0, 0x0, {0x2}, [@typed={0x7, 0x0, 0x0, 0x0, @str='{;\x00'}, @nested={0x8, 0x7, 0x0, 0x1, [@generic="64a9d54e"]}]}, 0x24}}, 0x0) [ 276.391944] RSP: 002b:00007fddc8057188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 276.394336] RAX: ffffffffffffffda RBX: 00007fddcac581a0 RCX: 00007fddcab44b19 [ 276.395579] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 276.396924] RBP: 00007fddcab9ef6d R08: 00000000200001c0 R09: 0000000000000000 [ 276.398176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.399434] R13: 00007ffe35c45b1f R14: 00007fddc8057300 R15: 0000000000022000 [ 276.400801] [ 276.401234] irq event stamp: 5569 [ 276.401913] hardirqs last enabled at (5581): [] __up_console_sem+0x78/0x80 [ 276.403484] hardirqs last disabled at (5592): [] __up_console_sem+0x5d/0x80 [ 276.405008] softirqs last enabled at (5516): [] handle_softirqs+0x50c/0x770 [ 276.406523] softirqs last disabled at (5509): [] irq_exit_rcu+0x94/0xc0 [ 276.407989] ---[ end trace 0000000000000000 ]--- [ 276.416583] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 22:10:10 executing program 5: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff8000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 22:10:10 executing program 1: r0 = perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{}, {r1}, {r0}], 0x3, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) 22:10:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, 0x18, 0x0, 0x101, 0x0, 0x0, {0x2}, [@typed={0x7, 0x0, 0x0, 0x0, @str='{;\x00'}, @nested={0x8, 0x7, 0x0, 0x1, [@generic="64a9d54e"]}]}, 0x24}}, 0x0) 22:10:10 executing program 3: r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='defcontext', &(0x7f0000000440)='unconfined_u', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 22:10:10 executing program 6: r0 = perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{}, {r1}, {r0}], 0x3, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) [ 276.807948] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 22:10:10 executing program 6: r0 = perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{}, {r1}, {r0}], 0x3, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) 22:10:10 executing program 2: r0 = perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{}, {r1}, {r0}], 0x3, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) 22:10:10 executing program 5: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff8000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 22:10:10 executing program 7: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff8000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 22:10:11 executing program 6: r0 = perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{}, {r1}, {r0}], 0x3, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) 22:10:11 executing program 1: r0 = perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{}, {r1}, {r0}], 0x3, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) 22:10:11 executing program 4: r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='defcontext', &(0x7f0000000440)='unconfined_u', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 22:10:11 executing program 2: r0 = perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{}, {r1}, {r0}], 0x3, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) 22:10:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f00000001c0)) 22:10:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@private}]}, 0x3c}}, 0x0) [ 277.166432] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 22:10:11 executing program 1: r0 = perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{}, {r1}, {r0}], 0x3, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) 22:10:12 executing program 4: r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='defcontext', &(0x7f0000000440)='unconfined_u', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 22:10:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@private}]}, 0x3c}}, 0x0) 22:10:12 executing program 7: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff8000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 22:10:12 executing program 5: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000140), 0x0) 22:10:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f00000001c0)) 22:10:12 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x18, &(0x7f0000004000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @private1}}, 0x5c) 22:10:12 executing program 2: r0 = perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{}, {r1}, {r0}], 0x3, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) 22:10:12 executing program 1: setgroups(0x1, &(0x7f00000016c0)=[0xee00]) socket$inet6_icmp(0xa, 0x2, 0x3a) [ 278.235165] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 22:10:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@private}]}, 0x3c}}, 0x0) 22:10:12 executing program 7: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff8000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 22:10:12 executing program 4: r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='defcontext', &(0x7f0000000440)='unconfined_u', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 22:10:12 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x18, &(0x7f0000004000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @private1}}, 0x5c) [ 278.464007] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 22:10:12 executing program 5: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000140), 0x0) 22:10:12 executing program 1: setgroups(0x1, &(0x7f00000016c0)=[0xee00]) socket$inet6_icmp(0xa, 0x2, 0x3a) 22:10:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f00000001c0)) 22:10:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@private}]}, 0x3c}}, 0x0) 22:10:12 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x18, &(0x7f0000004000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @private1}}, 0x5c) 22:10:12 executing program 1: setgroups(0x1, &(0x7f00000016c0)=[0xee00]) socket$inet6_icmp(0xa, 0x2, 0x3a) 22:10:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x5410, 0xfffffffffffffffd) 22:10:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x16, 0x0, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 22:10:12 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long}, 0x14) sendmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="7efc05d4655d0070d20bc61b7d8bbb4e2131592c92720e771e600d7aaca8196a707fb94b0cd89039f94cf3c74cfa451ef732d31a84f8362dc823e3247428ebe1f3204c5b06827f57609e6eea840bc8cf799c49d4a6ad69d9d70712bd5bed33bd6e7065f844f89643e9", 0x69}], 0x1}}], 0x2, 0x0) 22:10:12 executing program 5: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000140), 0x0) 22:10:12 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = dup2(r0, r0) listen(r1, 0x0) close(r0) 22:10:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f00000001c0)) 22:10:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x5410, 0xfffffffffffffffd) 22:10:13 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long}, 0x14) sendmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="7efc05d4655d0070d20bc61b7d8bbb4e2131592c92720e771e600d7aaca8196a707fb94b0cd89039f94cf3c74cfa451ef732d31a84f8362dc823e3247428ebe1f3204c5b06827f57609e6eea840bc8cf799c49d4a6ad69d9d70712bd5bed33bd6e7065f844f89643e9", 0x69}], 0x1}}], 0x2, 0x0) 22:10:13 executing program 1: setgroups(0x1, &(0x7f00000016c0)=[0xee00]) socket$inet6_icmp(0xa, 0x2, 0x3a) 22:10:13 executing program 5: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000140), 0x0) 22:10:13 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long}, 0x14) sendmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="7efc05d4655d0070d20bc61b7d8bbb4e2131592c92720e771e600d7aaca8196a707fb94b0cd89039f94cf3c74cfa451ef732d31a84f8362dc823e3247428ebe1f3204c5b06827f57609e6eea840bc8cf799c49d4a6ad69d9d70712bd5bed33bd6e7065f844f89643e9", 0x69}], 0x1}}], 0x2, 0x0) 22:10:13 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x18, &(0x7f0000004000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @private1}}, 0x5c) 22:10:13 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = dup2(r0, r0) listen(r1, 0x0) close(r0) 22:10:13 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long}, 0x14) sendmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="7efc05d4655d0070d20bc61b7d8bbb4e2131592c92720e771e600d7aaca8196a707fb94b0cd89039f94cf3c74cfa451ef732d31a84f8362dc823e3247428ebe1f3204c5b06827f57609e6eea840bc8cf799c49d4a6ad69d9d70712bd5bed33bd6e7065f844f89643e9", 0x69}], 0x1}}], 0x2, 0x0) 22:10:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x16, 0x0, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 22:10:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x5410, 0xfffffffffffffffd) 22:10:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x5410, 0xfffffffffffffffd) 22:10:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x16, 0x0, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 22:10:13 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long}, 0x14) sendmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="7efc05d4655d0070d20bc61b7d8bbb4e2131592c92720e771e600d7aaca8196a707fb94b0cd89039f94cf3c74cfa451ef732d31a84f8362dc823e3247428ebe1f3204c5b06827f57609e6eea840bc8cf799c49d4a6ad69d9d70712bd5bed33bd6e7065f844f89643e9", 0x69}], 0x1}}], 0x2, 0x0) 22:10:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = dup2(r0, r0) listen(r1, 0x0) close(r0) 22:10:13 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long}, 0x14) sendmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="7efc05d4655d0070d20bc61b7d8bbb4e2131592c92720e771e600d7aaca8196a707fb94b0cd89039f94cf3c74cfa451ef732d31a84f8362dc823e3247428ebe1f3204c5b06827f57609e6eea840bc8cf799c49d4a6ad69d9d70712bd5bed33bd6e7065f844f89643e9", 0x69}], 0x1}}], 0x2, 0x0) 22:10:13 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000005c0)={0x24, @long}, 0x14) sendmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="7efc05d4655d0070d20bc61b7d8bbb4e2131592c92720e771e600d7aaca8196a707fb94b0cd89039f94cf3c74cfa451ef732d31a84f8362dc823e3247428ebe1f3204c5b06827f57609e6eea840bc8cf799c49d4a6ad69d9d70712bd5bed33bd6e7065f844f89643e9", 0x69}], 0x1}}], 0x2, 0x0) 22:10:13 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000240)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6}, 0x10) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x42, 0xbc, 0x64, 0x0, 0x3, 0x1, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x8}, 0x80, 0x1f, 0x6, 0x2, 0x2, 0x42fb, 0x8001, 0x0, 0x8, 0x0, 0x8001}, 0xffffffffffffffff, 0xd, r1, 0x2) socket$inet6(0xa, 0x1, 0x400) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00'}) 22:10:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = dup2(r0, r0) listen(r1, 0x0) close(r0) 22:10:13 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = dup2(r0, r0) listen(r1, 0x0) close(r0) 22:10:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x16, 0x0, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 22:10:13 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "48a92c1e797cfcbfe9f55380b7cd5e439a3beb"}) 22:10:13 executing program 4: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x1000001, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syncfs(r0) 22:10:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x5, 0xffffffffffffffff}) [ 279.896058] syz_tun: entered promiscuous mode [ 279.971818] audit: type=1400 audit(1729203013.981:11): avc: denied { write } for pid=11082 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 280.000168] syz_tun: left promiscuous mode [ 280.050481] syz_tun: entered promiscuous mode [ 280.055213] syz_tun: left promiscuous mode 22:10:14 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = dup2(r0, r0) listen(r1, 0x0) close(r0) 22:10:14 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r1 = dup2(r0, r0) listen(r1, 0x0) close(r0) 22:10:14 executing program 4: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x1000001, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syncfs(r0) 22:10:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000f40)="ce3542eb445458f39828691c257433544b4e1d21fe9334d6e6a63c6bc211ca03243bf139a5eaa419029ce27c5328c9379bf108cb431795f6694f0afdd75e2bd4710ef3b6f1bc", 0x46}, {0x0, 0x2}, {0x0}], 0x3) 22:10:14 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "48a92c1e797cfcbfe9f55380b7cd5e439a3beb"}) 22:10:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x5, 0xffffffffffffffff}) 22:10:14 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000240)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6}, 0x10) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x42, 0xbc, 0x64, 0x0, 0x3, 0x1, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x8}, 0x80, 0x1f, 0x6, 0x2, 0x2, 0x42fb, 0x8001, 0x0, 0x8, 0x0, 0x8001}, 0xffffffffffffffff, 0xd, r1, 0x2) socket$inet6(0xa, 0x1, 0x400) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00'}) 22:10:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x5, 0xffffffffffffffff}) 22:10:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000f40)="ce3542eb445458f39828691c257433544b4e1d21fe9334d6e6a63c6bc211ca03243bf139a5eaa419029ce27c5328c9379bf108cb431795f6694f0afdd75e2bd4710ef3b6f1bc", 0x46}, {0x0, 0x2}, {0x0}], 0x3) 22:10:15 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "48a92c1e797cfcbfe9f55380b7cd5e439a3beb"}) 22:10:15 executing program 4: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x1000001, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syncfs(r0) 22:10:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_secret(0x0) 22:10:15 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x5460, &(0x7f0000000140)) 22:10:15 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000240)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6}, 0x10) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x42, 0xbc, 0x64, 0x0, 0x3, 0x1, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x8}, 0x80, 0x1f, 0x6, 0x2, 0x2, 0x42fb, 0x8001, 0x0, 0x8, 0x0, 0x8001}, 0xffffffffffffffff, 0xd, r1, 0x2) socket$inet6(0xa, 0x1, 0x400) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00'}) 22:10:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000f40)="ce3542eb445458f39828691c257433544b4e1d21fe9334d6e6a63c6bc211ca03243bf139a5eaa419029ce27c5328c9379bf108cb431795f6694f0afdd75e2bd4710ef3b6f1bc", 0x46}, {0x0, 0x2}, {0x0}], 0x3) 22:10:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000f40)="ce3542eb445458f39828691c257433544b4e1d21fe9334d6e6a63c6bc211ca03243bf139a5eaa419029ce27c5328c9379bf108cb431795f6694f0afdd75e2bd4710ef3b6f1bc", 0x46}, {0x0, 0x2}, {0x0}], 0x3) 22:10:16 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x5460, &(0x7f0000000140)) 22:10:16 executing program 4: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x1000001, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syncfs(r0) 22:10:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x5, 0xffffffffffffffff}) 22:10:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x5, 0xffffffffffffffff}) 22:10:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000240)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6}, 0x10) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x42, 0xbc, 0x64, 0x0, 0x3, 0x1, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x8}, 0x80, 0x1f, 0x6, 0x2, 0x2, 0x42fb, 0x8001, 0x0, 0x8, 0x0, 0x8001}, 0xffffffffffffffff, 0xd, r1, 0x2) socket$inet6(0xa, 0x1, 0x400) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00'}) 22:10:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_secret(0x0) 22:10:16 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "48a92c1e797cfcbfe9f55380b7cd5e439a3beb"}) 22:10:16 executing program 6: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000001c0), 0xffffffc1) 22:10:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_secret(0x0) 22:10:16 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x2014}], 0x1, 0x0) 22:10:16 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x5460, &(0x7f0000000140)) 22:10:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0bc5310, &(0x7f0000000200)) 22:10:16 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x5460, &(0x7f0000000140)) 22:10:16 executing program 6: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000001c0), 0xffffffc1) 22:10:16 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000) 22:10:16 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x2014}], 0x1, 0x0) 22:10:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_secret(0x0) [ 282.801652] ieee802154 phy0 wpan0: encryption failed: -22 [ 282.826908] ieee802154 phy0 wpan0: encryption failed: -22 22:10:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0bc5310, &(0x7f0000000200)) 22:10:17 executing program 6: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000001c0), 0xffffffc1) 22:10:17 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x2014}], 0x1, 0x0) 22:10:17 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000) 22:10:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0bc5310, &(0x7f0000000200)) 22:10:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0bc5310, &(0x7f0000000200)) 22:10:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x5, 0xffffffffffffffff}) 22:10:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x5, 0xffffffffffffffff}) 22:10:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0bc5310, &(0x7f0000000200)) [ 283.196133] ieee802154 phy0 wpan0: encryption failed: -22 22:10:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0bc5310, &(0x7f0000000200)) 22:10:17 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x2014}], 0x1, 0x0) 22:10:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0bc5310, &(0x7f0000000200)) 22:10:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0bc5310, &(0x7f0000000200)) 22:10:17 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000) 22:10:17 executing program 6: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000001c0), 0xffffffc1) [ 283.428896] ieee802154 phy0 wpan0: encryption failed: -22 22:10:17 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000) 22:10:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0bc5310, &(0x7f0000000200)) [ 283.527751] ieee802154 phy0 wpan0: encryption failed: -22 22:10:17 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 22:10:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0bc5310, &(0x7f0000000200)) 22:10:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0bc5310, &(0x7f0000000200)) VM DIAGNOSIS: 22:10:08 Registers: info registers vcpu 0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8262d465 RDI=ffffffff886610c0 RBP=ffffffff88661080 RSP=ffff88803e03f1d0 R8 =0000000000000000 R9 =ffffed1001d57046 R10=0000000000000039 R11=0000000065646f43 R12=0000000000000039 R13=ffffffff88661080 R14=0000000000000010 R15=ffffffff8262d450 RIP=ffffffff8262d4bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fddc8099700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020001000 CR3=0000000016360000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000003a6cc RBX=0000000000000002 RCX=0000000000000002 RDX=ffff88806cf09101 RSI=ffff88806cf09158 RDI=ffff88806cf09158 RBP=ffff88806cf088f0 RSP=ffff88806cf08828 R8 =0000000000000001 R9 =ffff88806cf088d8 R10=000000000003c001 R11=00000000000b95dc R12=ffff88806cf088f8 R13=ffff88806cf088e0 R14=ffff88806cf09158 R15=ffff88806cf08898 RIP=ffffffff81149afa RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f94ef0c4700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe146c45000 CR3=000000000d0d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000