last executing test programs: 3.687076045s ago: executing program 2 (id=4200): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/cpu_dma_latency\x00', 0x20c01, 0x11) writev(r0, &(0x7f0000002600)=[{&(0x7f0000000140)="ab21057c", 0x4}, {0x0}], 0x2) 3.686642983s ago: executing program 2 (id=4201): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd7000000000000000", @ANYRES32=r3, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x4c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x33}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) 3.598558683s ago: executing program 2 (id=4203): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20004450) syz_emit_ethernet(0xbe, 0x0, 0x0) rmdir(&(0x7f0000000080)='.\x00') r2 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140010001000010000000000000000000500000a88000000060a010400000000000000000a0000040900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f0800044000000037080002400000000224000180090001006d6173710000000014000280080002400000001508000141000000080900020073797a320000000014000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x6000840) dup3(0xffffffffffffffff, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1a1) syz_open_dev$sg(0x0, 0x6f5e, 0x2) 3.597690794s ago: executing program 2 (id=4204): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x4) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x30, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000000), 0xfffffffffffffffa, 0x40000) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000600)={0x37, 0xf, 0x0, 0x17, 0x7, 0x4, 0x6, 0x19, 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req={0x77, 0x10000, 0x8a6e, 0x8000}, 0x10) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x3fa, 0x800, 0x70bd26, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'ipvlan1\x00'}) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 3.440184521s ago: executing program 3 (id=4208): r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x200000000) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) 3.350065572s ago: executing program 3 (id=4209): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x10001, 0x4}) syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x40) getdents64(0xffffffffffffffff, 0x0, 0x59) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000200)={0xf000000, 0x5, 0x5, 0xffffffffffffffff, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) mbind(&(0x7f000070d000/0x1000)=nil, 0x1000, 0x3, 0x0, 0xe410, 0x5) getpid() 3.150354236s ago: executing program 0 (id=4211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xfffffff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.710544089s ago: executing program 1 (id=4217): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) epoll_create1(0x80000) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f00001a6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0) 2.230819325s ago: executing program 0 (id=4218): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1fb) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x2, 0x805, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) 2.230300361s ago: executing program 0 (id=4219): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.149469608s ago: executing program 3 (id=4220): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r4, &(0x7f0000012300)={0x2020}, 0x2020) 2.149099827s ago: executing program 0 (id=4221): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd700000000000000000", @ANYRES32=r3, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x4c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x33}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) 2.080496506s ago: executing program 0 (id=4222): inotify_init1(0x800) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) 1.217379573s ago: executing program 1 (id=4223): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000014b00000000000000000000000a20000000000a01020000000200000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c000380080001"], 0xd8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000001680)=""/193, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) epoll_create(0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0xc084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 1.21695475s ago: executing program 3 (id=4224): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20004450) syz_emit_ethernet(0xbe, 0x0, 0x0) rmdir(&(0x7f0000000080)='.\x00') r2 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140010001000010000000000000000000500000a88000000060a010400000000000000000a0000040900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f0800044000000037080002400000000224000180090001006d6173710000000014000280080002400000001508000141000000080900020073797a320000000014000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x6000840) dup3(0xffffffffffffffff, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1a1) syz_open_dev$sg(0x0, 0x6f5e, 0x2) 1.060859961s ago: executing program 3 (id=4225): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x2040851}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 1.060518469s ago: executing program 1 (id=4226): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000240), &(0x7f0000001240)="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", 0xf96, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20004450) syz_emit_ethernet(0xbe, 0x0, 0x0) rmdir(&(0x7f0000000080)='.\x00') r2 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140010001000010000000000000000000500000a88000000060a010400000000000000000a0000040900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f0800044000000037080002400000000224000180090001006d6173710000000014000280080002400000001508000141000000080900020073797a320000000014000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x6000840) dup3(0xffffffffffffffff, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1a1) syz_open_dev$sg(0x0, 0x6f5e, 0x2) 978.756336ms ago: executing program 1 (id=4227): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000018000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 784.827439ms ago: executing program 1 (id=4228): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xd6b, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) signalfd4(r1, &(0x7f0000000000)={[0xa5]}, 0x8, 0x0) 784.326671ms ago: executing program 3 (id=4229): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000000c0)=0x1000000, &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r4) 332.81868ms ago: executing program 2 (id=4230): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd700000000000000000", @ANYRES32=r3, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x4c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x33}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) 188.411608ms ago: executing program 0 (id=4231): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe) write(0xffffffffffffffff, &(0x7f0000000180)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0x0525\n', 0x7) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000280)='0xa4a5\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ed) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', 0x1ed) symlinkat(&(0x7f00000003c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0/rd_mcp_0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='naa.5001405000000001\n', 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/acls/naa.5001405000000002\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/acls/naa.5001405000000002/lun_0\x00', 0x1ed) symlinkat(&(0x7f0000000580)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/acls/naa.5001405000000002/lun_0/lun_0\x00') symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000740)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000780)={0x1}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x2) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x2) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffe, 0xa, 0x20, @buffer={0x0, 0x34, &(0x7f0000000200)=""/52}, &(0x7f0000000100)='_\x00\x00\x00\x00\x00\x00\x004\x00', &(0x7f0000000300)=""/32, 0x3e8, 0x0, 0x0, 0x0}) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffe, 0xa, 0x20, @buffer={0x0, 0x34, &(0x7f0000000200)=""/52}, &(0x7f0000000100)='_\x00\x00\x00\x00\x00\x00\x004\x00', &(0x7f0000000300)=""/32, 0x3e8, 0x0, 0x0, 0x0}) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffe, 0xa, 0x20, @buffer={0x0, 0x34, &(0x7f0000000200)=""/52}, &(0x7f0000000100)='_\x00\x00\x00\x00\x00\x00\x004\x00', &(0x7f0000000300)=""/32, 0x3e8, 0x0, 0x0, 0x0}) 264.906µs ago: executing program 2 (id=4232): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x2, {0x2, 0x0, 0x2}}, 0x18) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0xfff1, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 0s ago: executing program 1 (id=4233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000008500000a20000000000a01030000000034000000070000000900010073797a300000000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4400128014000180090001006c6173740000000004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000060c00018008000100"], 0xd0}}, 0x804) kernel console output (not intermixed with test programs): [T14225] comedi_parport [ 259.721393][T14225] comedi: valid board names for comedi_test driver are: [ 259.721398][T14225] comedi_test [ 259.721402][T14225] comedi: valid board names for comedi_bond driver are: [ 259.721406][T14225] comedi_bond [ 259.860854][T14231] syzkaller0: entered promiscuous mode [ 259.860881][T14231] syzkaller0: entered allmulticast mode [ 260.165608][T14237] jffs2: notice: (14237) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 260.205605][ T43] audit: type=1326 audit(1790151967.470:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.0.3377" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126d9e159 code=0x7ffc0000 [ 260.205635][ T43] audit: type=1326 audit(1790151967.470:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.0.3377" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126d9e159 code=0x7ffc0000 [ 260.207159][ T43] audit: type=1326 audit(1790151967.470:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.0.3377" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3126d5e98e code=0x7ffc0000 [ 260.207522][ T43] audit: type=1326 audit(1790151967.470:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.0.3377" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126d9e159 code=0x7ffc0000 [ 260.207545][ T43] audit: type=1326 audit(1790151967.470:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.0.3377" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126d9e159 code=0x7ffc0000 [ 260.207565][ T43] audit: type=1326 audit(1790151967.470:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.0.3377" exe="/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f3126d9e159 code=0x7ffc0000 [ 260.207586][ T43] audit: type=1326 audit(1790151967.470:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.0.3377" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126d9e159 code=0x7ffc0000 [ 260.207611][ T43] audit: type=1326 audit(1790151967.470:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.0.3377" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126d9e159 code=0x7ffc0000 [ 260.207645][ T43] audit: type=1326 audit(1790151967.470:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.0.3377" exe="/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3126d9e159 code=0x7ffc0000 [ 260.207677][ T43] audit: type=1326 audit(1790151967.470:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.0.3377" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3126d9e159 code=0x7ffc0000 [ 260.220528][T14242] jffs2: notice: (14242) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 260.321607][T14249] ip_tables: iptables: counters copy to user failed while replacing table [ 260.321982][T14249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14249 comm=syz.0.3377 [ 260.619279][T14263] jffs2: notice: (14263) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 260.673175][T14268] jffs2: notice: (14268) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 260.675406][T14268] jffs2: warning: (14268) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 260.747708][ T37] IPVS: starting estimator thread 0... [ 260.815099][T14279] FAULT_INJECTION: forcing a failure. [ 260.815099][T14279] name failslab, interval 1, probability 0, space 0, times 0 [ 260.815132][T14279] CPU: 0 UID: 0 PID: 14279 Comm: syz.3.3390 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.815157][T14279] Tainted: [L]=SOFTLOCKUP [ 260.815165][T14279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.815178][T14279] Call Trace: [ 260.815185][T14279] [ 260.815193][T14279] dump_stack_lvl+0x100/0x190 [ 260.815225][T14279] should_fail_ex.cold+0x5/0xa [ 260.815278][T14279] should_failslab+0xc2/0x120 [ 260.815307][T14279] __kmalloc_noprof+0xfc/0x840 [ 260.815328][T14279] ? __register_sysctl_table+0xbc8/0x1650 [ 260.815355][T14279] ? __register_sysctl_table+0xbe4/0x1650 [ 260.815388][T14279] __register_sysctl_table+0xbe4/0x1650 [ 260.815426][T14279] ? __pfx___register_sysctl_table+0x10/0x10 [ 260.815453][T14279] ? is_module_address+0x5f/0xf0 [ 260.815476][T14279] ? is_module_address+0x5f/0xf0 [ 260.815520][T14279] register_net_sysctl_sz+0x325/0x420 [ 260.815544][T14279] ? __asan_memcpy+0x3c/0x60 [ 260.815566][T14279] nf_log_net_init+0x109/0x450 [ 260.815591][T14279] ? __pfx_nf_log_net_init+0x10/0x10 [ 260.815613][T14279] ops_init+0x1e2/0x5f0 [ 260.815639][T14279] setup_net+0x118/0x3a0 [ 260.815664][T14279] ? __pfx_setup_net+0x10/0x10 [ 260.815694][T14279] copy_net_ns+0x345/0x7a0 [ 260.815721][T14279] create_new_namespaces+0x3ea/0xac0 [ 260.815748][T14279] unshare_nsproxy_namespaces+0xf2/0x220 [ 260.815771][T14279] ksys_unshare+0x4a2/0xa70 [ 260.815794][T14279] ? __pfx_ksys_unshare+0x10/0x10 [ 260.815825][T14279] __x64_sys_unshare+0x31/0x40 [ 260.815845][T14279] do_syscall_64+0x123/0x790 [ 260.815874][T14279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.815893][T14279] RIP: 0033:0x7fd28819e159 [ 260.815908][T14279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.815925][T14279] RSP: 002b:00007fd28907e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 260.815941][T14279] RAX: ffffffffffffffda RBX: 00007fd288425fa0 RCX: 00007fd28819e159 [ 260.815950][T14279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 260.815957][T14279] RBP: 00007fd28823506b R08: 0000000000000000 R09: 0000000000000000 [ 260.815965][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.815972][T14279] R13: 00007fd288426038 R14: 00007fd288425fa0 R15: 00007ffeb6256b28 [ 260.815988][T14279] [ 260.816034][T14279] sysctl could not get directory: /net/netfilter/nf_log -12 [ 260.841459][T14273] IPVS: using max 44 ests per chain, 105600 per kthread [ 260.914244][T14288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=14288 comm=syz.2.3395 [ 260.914360][T14288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=14288 comm=syz.2.3395 [ 260.914463][T14288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=14288 comm=syz.2.3395 [ 260.914567][T14288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=14288 comm=syz.2.3395 [ 260.914691][T14288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=14288 comm=syz.2.3395 [ 260.914815][T14288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=14288 comm=syz.2.3395 [ 260.914929][T14288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=14288 comm=syz.2.3395 [ 260.950130][T14295] jffs2: notice: (14295) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 260.953958][T14295] jffs2: warning: (14295) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 261.212802][T14308] bridge2: entered allmulticast mode [ 262.018371][T14333] Set syz1 is full, maxelem 6117 reached [ 262.404718][T14350] syzkaller0: entered promiscuous mode [ 262.404741][T14350] syzkaller0: entered allmulticast mode [ 263.202273][T14373] FAULT_INJECTION: forcing a failure. [ 263.202273][T14373] name failslab, interval 1, probability 0, space 0, times 0 [ 263.202297][T14373] CPU: 0 UID: 0 PID: 14373 Comm: syz.0.3430 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.202314][T14373] Tainted: [L]=SOFTLOCKUP [ 263.202319][T14373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.202326][T14373] Call Trace: [ 263.202332][T14373] [ 263.202339][T14373] dump_stack_lvl+0x100/0x190 [ 263.202387][T14373] should_fail_ex.cold+0x5/0xa [ 263.202415][T14373] should_failslab+0xc2/0x120 [ 263.202433][T14373] __kmalloc_noprof+0xfc/0x840 [ 263.202446][T14373] ? __register_sysctl_table+0xbc8/0x1650 [ 263.202464][T14373] ? __register_sysctl_table+0xbe4/0x1650 [ 263.202485][T14373] __register_sysctl_table+0xbe4/0x1650 [ 263.202512][T14373] ? __pfx___register_sysctl_table+0x10/0x10 [ 263.202529][T14373] ? is_module_address+0x5f/0xf0 [ 263.202544][T14373] ? is_module_address+0x5f/0xf0 [ 263.202562][T14373] register_net_sysctl_sz+0x325/0x420 [ 263.202577][T14373] ? __asan_memcpy+0x3c/0x60 [ 263.202590][T14373] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 263.202606][T14373] nf_lwtunnel_net_init+0x60/0xf0 [ 263.202622][T14373] ops_init+0x1e2/0x5f0 [ 263.202640][T14373] setup_net+0x118/0x3a0 [ 263.202655][T14373] ? __pfx_setup_net+0x10/0x10 [ 263.202674][T14373] copy_net_ns+0x345/0x7a0 [ 263.202691][T14373] create_new_namespaces+0x3ea/0xac0 [ 263.202709][T14373] unshare_nsproxy_namespaces+0xf2/0x220 [ 263.202725][T14373] ksys_unshare+0x4a2/0xa70 [ 263.202740][T14373] ? __pfx_ksys_unshare+0x10/0x10 [ 263.202754][T14373] ? ksys_write+0x1ac/0x250 [ 263.202771][T14373] __x64_sys_unshare+0x31/0x40 [ 263.202784][T14373] do_syscall_64+0x123/0x790 [ 263.202802][T14373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.202814][T14373] RIP: 0033:0x7f3126d9e159 [ 263.202824][T14373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.202835][T14373] RSP: 002b:00007f3127c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 263.202846][T14373] RAX: ffffffffffffffda RBX: 00007f3127025fa0 RCX: 00007f3126d9e159 [ 263.202853][T14373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 263.202860][T14373] RBP: 00007f3126e3506b R08: 0000000000000000 R09: 0000000000000000 [ 263.202867][T14373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.202873][T14373] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 263.202888][T14373] [ 263.202933][T14373] sysctl could not get directory: /net/netfilter -12 [ 264.838982][T14318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 264.930571][T14397] jffs2: notice: (14397) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 264.932855][T14397] jffs2: warning: (14397) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 265.115176][T14412] netlink: 'syz.2.3444': attribute type 2 has an invalid length. [ 265.115201][T14412] netlink: 'syz.2.3444': attribute type 2 has an invalid length. [ 266.371737][T14467] jffs2: notice: (14467) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 266.375955][T14467] jffs2: warning: (14467) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 266.644370][T14487] jffs2: notice: (14487) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 266.645760][T14487] jffs2: warning: (14487) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 266.646035][T14485] syzkaller0: entered promiscuous mode [ 266.646054][T14485] syzkaller0: entered allmulticast mode [ 268.221713][T14420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 268.222096][T14452] netlink: 'syz.0.3458': attribute type 2 has an invalid length. [ 268.222111][T14452] netlink: 'syz.0.3458': attribute type 2 has an invalid length. [ 268.251547][T14525] selinux_netlink_send: 256 callbacks suppressed [ 268.251559][T14525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32784 sclass=netlink_audit_socket pid=14525 comm=syz.2.3493 [ 268.251672][T14525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32800 sclass=netlink_audit_socket pid=14525 comm=syz.2.3493 [ 268.251783][T14525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32816 sclass=netlink_audit_socket pid=14525 comm=syz.2.3493 [ 268.251949][T14525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32832 sclass=netlink_audit_socket pid=14525 comm=syz.2.3493 [ 268.252078][T14525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32848 sclass=netlink_audit_socket pid=14525 comm=syz.2.3493 [ 268.252193][T14525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32864 sclass=netlink_audit_socket pid=14525 comm=syz.2.3493 [ 268.252313][T14525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32880 sclass=netlink_audit_socket pid=14525 comm=syz.2.3493 [ 268.252428][T14525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=32896 sclass=netlink_audit_socket pid=14525 comm=syz.2.3493 [ 268.252599][T14525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=4096 sclass=netlink_audit_socket pid=14525 comm=syz.2.3493 [ 268.252718][T14525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29008 sclass=netlink_audit_socket pid=14525 comm=syz.2.3493 [ 268.541396][T14546] netlink: 'syz.0.3503': attribute type 2 has an invalid length. [ 268.541430][T14546] netlink: 'syz.0.3503': attribute type 2 has an invalid length. [ 271.570943][T14550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.572211][T14577] netlink: 'syz.3.3514': attribute type 2 has an invalid length. [ 271.572239][T14577] netlink: 'syz.3.3514': attribute type 2 has an invalid length. [ 271.654464][T14592] syzkaller0: entered promiscuous mode [ 271.654477][T14592] syzkaller0: entered allmulticast mode [ 271.768295][T14604] FAULT_INJECTION: forcing a failure. [ 271.768295][T14604] name failslab, interval 1, probability 0, space 0, times 0 [ 271.768332][T14604] CPU: 0 UID: 0 PID: 14604 Comm: syz.0.3525 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.768363][T14604] Tainted: [L]=SOFTLOCKUP [ 271.768371][T14604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.768384][T14604] Call Trace: [ 271.768392][T14604] [ 271.768401][T14604] dump_stack_lvl+0x100/0x190 [ 271.768437][T14604] should_fail_ex.cold+0x5/0xa [ 271.768472][T14604] should_failslab+0xc2/0x120 [ 271.768499][T14604] __kmalloc_noprof+0xfc/0x840 [ 271.768523][T14604] ? handler_new_ref+0x1ab/0xc60 [ 271.768560][T14604] handler_new_ref+0x1ab/0xc60 [ 271.768597][T14604] v4l2_ctrl_new+0xe67/0x23a0 [ 271.768636][T14604] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 271.768664][T14604] ? handler_new_ref+0x7cb/0xc60 [ 271.768698][T14604] v4l2_ctrl_new_std+0x1bb/0x290 [ 271.768735][T14604] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 271.768768][T14604] ? __mutex_unlock_slowpath+0x35d/0x930 [ 271.768803][T14604] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.768831][T14604] ? __asan_memcpy+0x3c/0x60 [ 271.768851][T14604] ? find_ref+0x209/0x420 [ 271.768884][T14604] handler_new_ref+0x82f/0xc60 [ 271.768924][T14604] v4l2_ctrl_new+0xe67/0x23a0 [ 271.768981][T14604] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 271.769029][T14604] v4l2_ctrl_new_std+0x1bb/0x290 [ 271.769071][T14604] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 271.769103][T14604] ? rcu_is_watching+0x13/0xc0 [ 271.769137][T14604] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 271.769166][T14604] ? media_request_object_init+0x105/0x180 [ 271.769200][T14604] vicodec_open+0x1b2/0xf70 [ 271.769222][T14604] ? kobject_get_unless_zero+0x156/0x200 [ 271.769253][T14604] v4l2_open+0x1d2/0x490 [ 271.769282][T14604] ? __pfx_v4l2_open+0x10/0x10 [ 271.769305][T14604] chrdev_open+0x234/0x6a0 [ 271.769331][T14604] ? __pfx_chrdev_open+0x10/0x10 [ 271.769358][T14604] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 271.769395][T14604] do_dentry_open+0x6ab/0x14d0 [ 271.769418][T14604] ? __pfx_chrdev_open+0x10/0x10 [ 271.769455][T14604] vfs_open+0x82/0x3f0 [ 271.769488][T14604] path_openat+0x19fa/0x2440 [ 271.769520][T14604] ? __pfx_path_openat+0x10/0x10 [ 271.769563][T14604] do_file_open+0x20e/0x430 [ 271.769593][T14604] ? __pfx_do_file_open+0x10/0x10 [ 271.769638][T14604] ? _raw_spin_unlock+0x28/0x50 [ 271.769666][T14604] ? alloc_fd+0x471/0x7a0 [ 271.769700][T14604] do_sys_openat2+0x10f/0x1e0 [ 271.769729][T14604] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.769756][T14604] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 271.769790][T14604] __x64_sys_openat+0x12d/0x210 [ 271.769817][T14604] ? __pfx___x64_sys_openat+0x10/0x10 [ 271.769851][T14604] do_syscall_64+0x123/0x790 [ 271.769881][T14604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.769901][T14604] RIP: 0033:0x7f3126d5e98e [ 271.769918][T14604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 271.769937][T14604] RSP: 002b:00007f3127c7ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 271.769958][T14604] RAX: ffffffffffffffda RBX: 00007f3127c7b6c0 RCX: 00007f3126d5e98e [ 271.769972][T14604] RDX: 0000000000000002 RSI: 00007f3127c7ac00 RDI: ffffffffffffff9c [ 271.769985][T14604] RBP: 00007f3127c7ac00 R08: 0000000000000000 R09: 0000000000000000 [ 271.769995][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 271.770008][T14604] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 271.770036][T14604] [ 271.994989][T14624] jffs2: notice: (14624) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 271.998206][T14624] jffs2: warning: (14624) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 272.052951][T14628] syzkaller0: entered promiscuous mode [ 272.052974][T14628] syzkaller0: entered allmulticast mode [ 272.483000][T14652] jffs2: notice: (14652) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 272.492608][T14652] jffs2: warning: (14652) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 272.837172][T14677] jffs2: notice: (14677) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 272.840975][T14677] jffs2: warning: (14677) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 273.792121][T14697] tps6598x 0-0020: failed to read vendor ID: -6, vid: 0x0 [ 273.797994][T14697] i2c i2c-0: new_device: Instantiated device tps6598x at 0x20 [ 273.965950][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 273.965962][ T43] audit: type=1400 audit(1790151981.230:548): avc: denied { name_bind } for pid=14709 comm="syz.1.3568" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 274.932685][T14617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.013001][T14726] syzkaller0: entered promiscuous mode [ 275.013022][T14726] syzkaller0: entered allmulticast mode [ 275.110599][ T43] audit: type=1400 audit(1790151982.380:549): avc: denied { write } for pid=14737 comm="syz.3.3578" name="functions" dev="configfs" ino=47509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.112023][ T43] audit: type=1400 audit(1790151982.380:550): avc: denied { write } for pid=14737 comm="syz.3.3578" name="target" dev="configfs" ino=1452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.116254][ T43] audit: type=1400 audit(1790151982.380:551): avc: denied { write } for pid=14737 comm="syz.3.3578" name="usb_gadget" dev="configfs" ino=49598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.119134][ T43] audit: type=1400 audit(1790151982.390:552): avc: denied { write } for pid=14737 comm="syz.3.3578" name="naa.6001405c935d7912" dev="configfs" ino=49600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.140260][T14742] jffs2: notice: (14742) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 275.144998][T14742] jffs2: warning: (14742) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 275.917601][T14769] syzkaller0: entered promiscuous mode [ 275.917616][T14769] syzkaller0: entered allmulticast mode [ 276.717641][T14786] jffs2: notice: (14786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 276.720415][T14786] jffs2: warning: (14786) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 277.121747][T14810] syzkaller0: entered promiscuous mode [ 277.121761][T14810] syzkaller0: entered allmulticast mode [ 277.256442][T14819] FAULT_INJECTION: forcing a failure. [ 277.256442][T14819] name failslab, interval 1, probability 0, space 0, times 0 [ 277.256477][T14819] CPU: 0 UID: 0 PID: 14819 Comm: syz.1.3606 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.256512][T14819] Tainted: [L]=SOFTLOCKUP [ 277.256520][T14819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.256533][T14819] Call Trace: [ 277.256541][T14819] [ 277.256549][T14819] dump_stack_lvl+0x100/0x190 [ 277.256581][T14819] should_fail_ex.cold+0x5/0xa [ 277.256609][T14819] should_failslab+0xc2/0x120 [ 277.256639][T14819] __kmalloc_noprof+0xfc/0x840 [ 277.256661][T14819] ? __register_sysctl_table+0xbc8/0x1650 [ 277.256692][T14819] ? __register_sysctl_table+0xbe4/0x1650 [ 277.256727][T14819] __register_sysctl_table+0xbe4/0x1650 [ 277.256763][T14819] ? __pfx___register_sysctl_table+0x10/0x10 [ 277.256791][T14819] ? is_module_address+0x5f/0xf0 [ 277.256815][T14819] ? is_module_address+0x5f/0xf0 [ 277.256845][T14819] register_net_sysctl_sz+0x325/0x420 [ 277.256889][T14819] ? __asan_memcpy+0x3c/0x60 [ 277.256913][T14819] nf_log_net_init+0x109/0x450 [ 277.256942][T14819] ? __pfx_nf_log_net_init+0x10/0x10 [ 277.256966][T14819] ops_init+0x1e2/0x5f0 [ 277.256994][T14819] setup_net+0x118/0x3a0 [ 277.257023][T14819] ? __pfx_setup_net+0x10/0x10 [ 277.257057][T14819] copy_net_ns+0x345/0x7a0 [ 277.257088][T14819] create_new_namespaces+0x3ea/0xac0 [ 277.257117][T14819] unshare_nsproxy_namespaces+0xf2/0x220 [ 277.257143][T14819] ksys_unshare+0x4a2/0xa70 [ 277.257169][T14819] ? __pfx_ksys_unshare+0x10/0x10 [ 277.257193][T14819] ? ksys_write+0x1ac/0x250 [ 277.257224][T14819] __x64_sys_unshare+0x31/0x40 [ 277.257247][T14819] do_syscall_64+0x123/0x790 [ 277.257278][T14819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.257308][T14819] RIP: 0033:0x7f50b1d9e159 [ 277.257326][T14819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.257346][T14819] RSP: 002b:00007f50b2bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 277.257368][T14819] RAX: ffffffffffffffda RBX: 00007f50b2025fa0 RCX: 00007f50b1d9e159 [ 277.257383][T14819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 277.257396][T14819] RBP: 00007f50b1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 277.257409][T14819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.257421][T14819] R13: 00007f50b2026038 R14: 00007f50b2025fa0 R15: 00007ffc50eabc58 [ 277.257447][T14819] [ 277.260881][T14819] sysctl could not get directory: /net/netfilter/nf_log -12 [ 277.709324][T14838] syzkaller0: entered promiscuous mode [ 277.709348][T14838] syzkaller0: entered allmulticast mode [ 277.915636][T14844] FAULT_INJECTION: forcing a failure. [ 277.915636][T14844] name failslab, interval 1, probability 0, space 0, times 0 [ 277.915669][T14844] CPU: 3 UID: 0 PID: 14844 Comm: syz.0.3617 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.915695][T14844] Tainted: [L]=SOFTLOCKUP [ 277.915701][T14844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.915712][T14844] Call Trace: [ 277.915719][T14844] [ 277.915727][T14844] dump_stack_lvl+0x100/0x190 [ 277.915757][T14844] should_fail_ex.cold+0x5/0xa [ 277.915783][T14844] should_failslab+0xc2/0x120 [ 277.915812][T14844] kmem_cache_alloc_noprof+0x92/0x6a0 [ 277.915831][T14844] ? create_new_namespaces+0x30/0xac0 [ 277.915859][T14844] create_new_namespaces+0x30/0xac0 [ 277.915881][T14844] ? bpf_lsm_capable+0x9/0x10 [ 277.915906][T14844] ? security_capable+0x80/0x260 [ 277.915936][T14844] unshare_nsproxy_namespaces+0xf2/0x220 [ 277.915960][T14844] ksys_unshare+0x4a2/0xa70 [ 277.915981][T14844] ? __pfx_ksys_unshare+0x10/0x10 [ 277.916002][T14844] ? ksys_write+0x1ac/0x250 [ 277.916028][T14844] __x64_sys_unshare+0x31/0x40 [ 277.916048][T14844] do_syscall_64+0x123/0x790 [ 277.916076][T14844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.916094][T14844] RIP: 0033:0x7f3126d9e159 [ 277.916110][T14844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.916126][T14844] RSP: 002b:00007f3127c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 277.916146][T14844] RAX: ffffffffffffffda RBX: 00007f3127025fa0 RCX: 00007f3126d9e159 [ 277.916158][T14844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 277.916189][T14844] RBP: 00007f3126e3506b R08: 0000000000000000 R09: 0000000000000000 [ 277.916201][T14844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.916213][T14844] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 277.916239][T14844] [ 277.974968][T14846] jffs2: notice: (14846) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 277.976919][T14846] jffs2: warning: (14846) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 278.169430][T14749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 278.169726][T14759] netlink: 'syz.2.3581': attribute type 2 has an invalid length. [ 278.169747][T14759] netlink: 'syz.2.3581': attribute type 2 has an invalid length. [ 278.242390][T14857] syzkaller0: entered promiscuous mode [ 278.242411][T14857] syzkaller0: entered allmulticast mode [ 278.351892][T14864] jffs2: notice: (14864) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 278.355328][T14864] jffs2: warning: (14864) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 278.754482][T14899] jffs2: notice: (14899) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 278.757198][T14899] jffs2: warning: (14899) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 278.884468][T14887] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 278.960508][ T43] audit: type=1400 audit(1790151986.230:553): avc: denied { write } for pid=14905 comm="syz.0.3641" name="tcp" dev="proc" ino=4026532963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 279.014312][T14887] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 279.080489][T14910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3642'. [ 279.173732][T14912] jffs2: notice: (14912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 279.175363][T14912] jffs2: warning: (14912) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 279.498248][T14922] jffs2: notice: (14922) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 279.500368][T14922] jffs2: warning: (14922) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 279.582955][T14933] jffs2: notice: (14933) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 279.585975][T14933] jffs2: warning: (14933) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 280.654441][T14958] jffs2: notice: (14958) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 280.659070][T14958] jffs2: warning: (14958) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 280.703742][T14961] syzkaller0: entered promiscuous mode [ 280.703757][T14961] syzkaller0: entered allmulticast mode [ 280.887131][ T43] audit: type=1326 audit(1790151988.150:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.2.3665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195079e159 code=0x7ffc0000 [ 280.887182][ T43] audit: type=1326 audit(1790151988.150:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.2.3665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195079e159 code=0x7ffc0000 [ 280.887206][ T43] audit: type=1326 audit(1790151988.150:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.2.3665" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f195079e159 code=0x7ffc0000 [ 280.887231][ T43] audit: type=1326 audit(1790151988.150:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.2.3665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195079e159 code=0x7ffc0000 [ 280.887251][ T43] audit: type=1326 audit(1790151988.150:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.2.3665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195079e159 code=0x7ffc0000 [ 280.887300][ T43] audit: type=1326 audit(1790151988.150:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.2.3665" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f195079e159 code=0x7ffc0000 [ 280.887342][ T43] audit: type=1326 audit(1790151988.150:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.2.3665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195079e159 code=0x7ffc0000 [ 280.887365][ T43] audit: type=1326 audit(1790151988.150:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.2.3665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195079e159 code=0x7ffc0000 [ 280.887385][ T43] audit: type=1326 audit(1790151988.150:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.2.3665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195079e159 code=0x7ffc0000 [ 280.887407][ T43] audit: type=1326 audit(1790151988.150:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.2.3665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195079e159 code=0x7ffc0000 [ 281.353955][T14865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.360528][T14951] netlink: 'syz.3.3658': attribute type 2 has an invalid length. [ 281.360552][T14951] netlink: 'syz.3.3658': attribute type 2 has an invalid length. [ 281.468340][T14978] jffs2: notice: (14978) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 281.470579][T14978] jffs2: warning: (14978) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 281.517145][T14982] syzkaller0: entered promiscuous mode [ 281.517159][T14982] syzkaller0: entered allmulticast mode [ 281.519784][T14984] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 282.179750][T15014] syzkaller0: entered promiscuous mode [ 282.179767][T15014] syzkaller0: entered allmulticast mode [ 282.205650][T15015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3684'. [ 282.313473][T15019] jffs2: notice: (15019) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 282.321138][T15019] jffs2: warning: (15019) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 282.374868][T15024] bridge0: entered promiscuous mode [ 282.374896][T15024] bridge0: entered allmulticast mode [ 282.390460][T15024] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 284.834143][T14995] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.906144][T15045] jffs2: notice: (15045) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 284.910722][T15045] jffs2: warning: (15045) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 285.824368][T15070] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3704'. [ 286.212566][T15076] jffs2: notice: (15076) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 286.214250][T15076] jffs2: warning: (15076) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 286.377190][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 286.377205][ T43] audit: type=1400 audit(1790151993.380:570): avc: denied { checkpoint_restore } for pid=15073 comm="syz.3.3706" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 288.233196][ T43] audit: type=1400 audit(1790151995.500:571): avc: denied { ioctl } for pid=15091 comm="syz.0.3713" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 288.281076][T15095] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 288.316999][T15063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.406878][T15101] jffs2: notice: (15101) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 288.408459][T15101] jffs2: warning: (15101) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 288.420106][ T43] audit: type=1400 audit(1790151995.690:572): avc: denied { mount } for pid=15100 comm="syz.2.3717" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 288.456380][ T43] audit: type=1400 audit(1790151995.720:573): avc: denied { create } for pid=15100 comm="syz.2.3717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.458685][ T43] audit: type=1400 audit(1790151995.730:574): avc: denied { ioctl } for pid=15100 comm="syz.2.3717" path="socket:[51044]" dev="sockfs" ino=51044 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.576421][T15111] process 'syz.3.3718' launched './file0' with NULL argv: empty string added [ 288.643664][T15117] FAULT_INJECTION: forcing a failure. [ 288.643664][T15117] name failslab, interval 1, probability 0, space 0, times 0 [ 288.643707][T15117] CPU: 1 UID: 0 PID: 15117 Comm: syz.1.3723 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.643734][T15117] Tainted: [L]=SOFTLOCKUP [ 288.643742][T15117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.643754][T15117] Call Trace: [ 288.643761][T15117] [ 288.643770][T15117] dump_stack_lvl+0x100/0x190 [ 288.643806][T15117] should_fail_ex.cold+0x5/0xa [ 288.643837][T15117] should_failslab+0xc2/0x120 [ 288.643865][T15117] kmem_cache_alloc_noprof+0x92/0x6a0 [ 288.643888][T15117] ? create_new_namespaces+0x30/0xac0 [ 288.643919][T15117] create_new_namespaces+0x30/0xac0 [ 288.643942][T15117] ? bpf_lsm_capable+0x9/0x10 [ 288.643970][T15117] ? security_capable+0x80/0x260 [ 288.644004][T15117] unshare_nsproxy_namespaces+0xf2/0x220 [ 288.644047][T15117] ksys_unshare+0x4a2/0xa70 [ 288.644072][T15117] ? __pfx_ksys_unshare+0x10/0x10 [ 288.644104][T15117] __x64_sys_unshare+0x31/0x40 [ 288.644129][T15117] do_syscall_64+0x123/0x790 [ 288.644160][T15117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.644179][T15117] RIP: 0033:0x7f50b1d9e159 [ 288.644194][T15117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.644211][T15117] RSP: 002b:00007f50b2bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 288.644230][T15117] RAX: ffffffffffffffda RBX: 00007f50b2025fa0 RCX: 00007f50b1d9e159 [ 288.644242][T15117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 288.644254][T15117] RBP: 00007f50b1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 288.644265][T15117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.644276][T15117] R13: 00007f50b2026038 R14: 00007f50b2025fa0 R15: 00007ffc50eabc58 [ 288.644301][T15117] [ 288.790976][T15130] syzkaller0: entered promiscuous mode [ 288.790998][T15130] syzkaller0: entered allmulticast mode [ 288.891105][ T43] audit: type=1400 audit(1790151996.160:575): avc: denied { write } for pid=15131 comm="syz.3.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 289.450914][T15153] syzkaller0: entered promiscuous mode [ 289.450935][T15153] syzkaller0: entered allmulticast mode [ 289.944736][T15159] FAULT_INJECTION: forcing a failure. [ 289.944736][T15159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.944761][T15159] CPU: 1 UID: 60928 PID: 15159 Comm: syz.2.3738 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.944777][T15159] Tainted: [L]=SOFTLOCKUP [ 289.944781][T15159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.944788][T15159] Call Trace: [ 289.944793][T15159] [ 289.944799][T15159] dump_stack_lvl+0x100/0x190 [ 289.944818][T15159] should_fail_ex.cold+0x5/0xa [ 289.944835][T15159] _copy_to_user+0x32/0xd0 [ 289.944850][T15159] iommufd_ioas_map+0x521/0x6c0 [ 289.944867][T15159] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 289.944884][T15159] iommufd_fops_ioctl+0x358/0x520 [ 289.944900][T15159] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 289.944918][T15159] ? __fget_files+0x34/0x3d0 [ 289.944961][T15159] ? selinux_file_ioctl+0x13b/0x290 [ 289.944976][T15159] ? selinux_file_ioctl+0xb6/0x290 [ 289.944990][T15159] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 289.945007][T15159] __x64_sys_ioctl+0x18e/0x210 [ 289.945039][T15159] do_syscall_64+0x123/0x790 [ 289.945059][T15159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.945072][T15159] RIP: 0033:0x7f195079e159 [ 289.945083][T15159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.945094][T15159] RSP: 002b:00007f1951585028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.945106][T15159] RAX: ffffffffffffffda RBX: 00007f1950a26180 RCX: 00007f195079e159 [ 289.945114][T15159] RDX: 0000200000000040 RSI: 0000000000003b85 RDI: 0000000000000007 [ 289.945121][T15159] RBP: 00007f195083506b R08: 0000000000000000 R09: 0000000000000000 [ 289.945127][T15159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.945134][T15159] R13: 00007f1950a26218 R14: 00007f1950a26180 R15: 00007ffdcd7f3758 [ 289.945148][T15159] [ 291.713976][T15122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.714689][T15134] netlink: 'syz.3.3728': attribute type 2 has an invalid length. [ 291.714703][T15134] netlink: 'syz.3.3728': attribute type 2 has an invalid length. [ 291.754224][T15169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3741'. [ 291.814005][T15179] jffs2: notice: (15179) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 291.815711][T15179] jffs2: warning: (15179) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 291.816358][ T43] audit: type=1400 audit(1790151999.080:576): avc: denied { read } for pid=15178 comm="syz.1.3746" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 291.816504][ T43] audit: type=1400 audit(1790151999.080:577): avc: denied { open } for pid=15178 comm="syz.1.3746" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 291.839761][T15177] syzkaller0: entered promiscuous mode [ 291.839786][T15177] syzkaller0: entered allmulticast mode [ 291.905589][ T43] audit: type=1400 audit(1790151999.170:578): avc: denied { read } for pid=15186 comm="syz.2.3749" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 291.905644][ T43] audit: type=1400 audit(1790151999.170:579): avc: denied { open } for pid=15186 comm="syz.2.3749" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 292.295951][T15196] netlink: 'syz.3.3751': attribute type 2 has an invalid length. [ 292.295974][T15196] netlink: 'syz.3.3751': attribute type 2 has an invalid length. [ 292.433550][ T43] audit: type=1400 audit(1790151999.700:580): avc: denied { mount } for pid=15197 comm="syz.0.3752" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 292.435272][T15198] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 292.446917][ T43] audit: type=1400 audit(1790151999.710:581): avc: denied { unmount } for pid=11886 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 292.915370][T15211] syzkaller0: entered promiscuous mode [ 292.915383][T15211] syzkaller0: entered allmulticast mode [ 293.150553][T15218] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 293.190828][T15222] netlink: 'syz.2.3764': attribute type 1 has an invalid length. [ 293.190849][T15222] netlink: 'syz.2.3764': attribute type 2 has an invalid length. [ 293.251403][ T43] audit: type=1400 audit(1790152000.520:582): avc: denied { append } for pid=15226 comm="syz.2.3766" name="001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 293.360719][T15239] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3771'. [ 294.504886][T15264] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3781'. [ 295.065322][T15286] FAULT_INJECTION: forcing a failure. [ 295.065322][T15286] name failslab, interval 1, probability 0, space 0, times 0 [ 295.065345][T15286] CPU: 1 UID: 0 PID: 15286 Comm: syz.1.3790 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.065361][T15286] Tainted: [L]=SOFTLOCKUP [ 295.065365][T15286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.065372][T15286] Call Trace: [ 295.065376][T15286] [ 295.065381][T15286] dump_stack_lvl+0x100/0x190 [ 295.065402][T15286] should_fail_ex.cold+0x5/0xa [ 295.065418][T15286] should_failslab+0xc2/0x120 [ 295.065435][T15286] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 295.065450][T15286] ? sock_alloc_inode+0x26/0x2c0 [ 295.065468][T15286] ? __pfx_sock_alloc_inode+0x10/0x10 [ 295.065485][T15286] sock_alloc_inode+0x26/0x2c0 [ 295.065501][T15286] ? __pfx_sock_alloc_inode+0x10/0x10 [ 295.065516][T15286] alloc_inode+0x68/0x250 [ 295.065528][T15286] sock_alloc+0x44/0x280 [ 295.065542][T15286] ? security_socket_create+0x7f/0x250 [ 295.065555][T15286] __sock_create+0xc2/0x860 [ 295.065568][T15286] __sys_socket+0x14d/0x260 [ 295.065580][T15286] ? __pfx___sys_socket+0x10/0x10 [ 295.065594][T15286] __x64_sys_socket+0x72/0xb0 [ 295.065605][T15286] ? lockdep_hardirqs_on+0x7d/0x110 [ 295.065622][T15286] do_syscall_64+0x123/0x790 [ 295.065640][T15286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.065651][T15286] RIP: 0033:0x7f50b1d9e159 [ 295.065663][T15286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.065674][T15286] RSP: 002b:00007f50b2bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 295.065685][T15286] RAX: ffffffffffffffda RBX: 00007f50b2025fa0 RCX: 00007f50b1d9e159 [ 295.065693][T15286] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 295.065700][T15286] RBP: 00007f50b1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 295.065707][T15286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.065713][T15286] R13: 00007f50b2026038 R14: 00007f50b2025fa0 R15: 00007ffc50eabc58 [ 295.065727][T15286] [ 295.065733][T15286] socket: no more sockets [ 295.380458][ T43] audit: type=1400 audit(1790152002.650:583): avc: denied { execute } for pid=15303 comm="syz.0.3798" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.617178][ T25] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 295.748344][T15318] jffs2: notice: (15318) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 295.750662][T15318] jffs2: warning: (15318) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 295.787522][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.789768][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.789786][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.789798][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.789818][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.791405][ T25] usb 5-1: config 0 descriptor?? [ 295.861927][T15325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3807'. [ 295.919107][T15331] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 296.206418][ T25] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 296.229876][ T25] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 296.460497][ T25] usb 5-1: USB disconnect, device number 37 [ 296.886124][ T43] audit: type=1400 audit(1790152004.150:584): avc: denied { mount } for pid=15354 comm="syz.2.3818" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 296.886772][ T43] audit: type=1400 audit(1790152004.150:585): avc: denied { search } for pid=15354 comm="syz.2.3818" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 296.886873][ T43] audit: type=1400 audit(1790152004.150:586): avc: denied { search } for pid=15354 comm="syz.2.3818" name="instances" dev="tracefs" ino=6468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 296.898861][ T43] audit: type=1400 audit(1790152004.170:587): avc: denied { unmount } for pid=10830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 297.099207][T15364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3823'. [ 297.260530][T15374] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 297.709952][T15391] jffs2: notice: (15391) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 297.711760][T15391] jffs2: warning: (15391) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 297.798515][T15396] FAULT_INJECTION: forcing a failure. [ 297.798515][T15396] name failslab, interval 1, probability 0, space 0, times 0 [ 297.798553][T15396] CPU: 0 UID: 0 PID: 15396 Comm: syz.0.3835 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.798582][T15396] Tainted: [L]=SOFTLOCKUP [ 297.798590][T15396] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.798603][T15396] Call Trace: [ 297.798611][T15396] [ 297.798620][T15396] dump_stack_lvl+0x100/0x190 [ 297.798654][T15396] should_fail_ex.cold+0x5/0xa [ 297.798686][T15396] should_failslab+0xc2/0x120 [ 297.798711][T15396] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 297.798735][T15396] ? sock_alloc_inode+0x26/0x2c0 [ 297.798767][T15396] ? __pfx_sock_alloc_inode+0x10/0x10 [ 297.798798][T15396] sock_alloc_inode+0x26/0x2c0 [ 297.798825][T15396] ? __pfx_sock_alloc_inode+0x10/0x10 [ 297.798854][T15396] alloc_inode+0x68/0x250 [ 297.798874][T15396] sock_alloc+0x44/0x280 [ 297.798901][T15396] ? security_socket_create+0x7f/0x250 [ 297.798924][T15396] __sock_create+0xc2/0x860 [ 297.798949][T15396] __sys_socket+0x14d/0x260 [ 297.798970][T15396] ? __pfx___sys_socket+0x10/0x10 [ 297.798999][T15396] __x64_sys_socket+0x72/0xb0 [ 297.799019][T15396] ? lockdep_hardirqs_on+0x7d/0x110 [ 297.799050][T15396] do_syscall_64+0x123/0x790 [ 297.799109][T15396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.799134][T15396] RIP: 0033:0x7f3126d9e159 [ 297.799154][T15396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.799173][T15396] RSP: 002b:00007f3127c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 297.799195][T15396] RAX: ffffffffffffffda RBX: 00007f3127025fa0 RCX: 00007f3126d9e159 [ 297.799216][T15396] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 297.799229][T15396] RBP: 00007f3126e3506b R08: 0000000000000000 R09: 0000000000000000 [ 297.799242][T15396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.799255][T15396] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 297.799284][T15396] [ 297.799297][T15396] socket: no more sockets [ 297.950950][T15404] jffs2: notice: (15404) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 297.952922][T15404] jffs2: warning: (15404) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 298.287747][T15420] FAULT_INJECTION: forcing a failure. [ 298.287747][T15420] name failslab, interval 1, probability 0, space 0, times 0 [ 298.287781][T15420] CPU: 2 UID: 0 PID: 15420 Comm: syz.0.3844 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.287808][T15420] Tainted: [L]=SOFTLOCKUP [ 298.287814][T15420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.287823][T15420] Call Trace: [ 298.287830][T15420] [ 298.287837][T15420] dump_stack_lvl+0x100/0x190 [ 298.287867][T15420] should_fail_ex.cold+0x5/0xa [ 298.287893][T15420] should_failslab+0xc2/0x120 [ 298.287919][T15420] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 298.287941][T15420] ? sock_alloc_inode+0x26/0x2c0 [ 298.287968][T15420] ? __pfx_sock_alloc_inode+0x10/0x10 [ 298.287995][T15420] sock_alloc_inode+0x26/0x2c0 [ 298.288020][T15420] ? __pfx_sock_alloc_inode+0x10/0x10 [ 298.288044][T15420] alloc_inode+0x68/0x250 [ 298.288063][T15420] sock_alloc+0x44/0x280 [ 298.288083][T15420] ? security_socket_create+0x7f/0x250 [ 298.288105][T15420] __sock_create+0xc2/0x860 [ 298.288128][T15420] __sys_socket+0x14d/0x260 [ 298.288145][T15420] ? fput+0x7c/0x100 [ 298.288168][T15420] ? __pfx___sys_socket+0x10/0x10 [ 298.288185][T15420] ? ksys_write+0x1ac/0x250 [ 298.288211][T15420] ? __pfx_ksys_write+0x10/0x10 [ 298.288236][T15420] __x64_sys_socket+0x72/0xb0 [ 298.288256][T15420] ? lockdep_hardirqs_on+0x7d/0x110 [ 298.288284][T15420] do_syscall_64+0x123/0x790 [ 298.288313][T15420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.288332][T15420] RIP: 0033:0x7f3126d9e159 [ 298.288348][T15420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.288366][T15420] RSP: 002b:00007f3127c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 298.288385][T15420] RAX: ffffffffffffffda RBX: 00007f3127025fa0 RCX: 00007f3126d9e159 [ 298.288398][T15420] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 298.288410][T15420] RBP: 00007f3126e3506b R08: 0000000000000000 R09: 0000000000000000 [ 298.288421][T15420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.288430][T15420] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 298.288454][T15420] [ 298.288462][T15420] socket: no more sockets [ 298.664290][T15432] FAULT_INJECTION: forcing a failure. [ 298.664290][T15432] name failslab, interval 1, probability 0, space 0, times 0 [ 298.664312][T15432] CPU: 2 UID: 0 PID: 15432 Comm: syz.0.3850 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.664329][T15432] Tainted: [L]=SOFTLOCKUP [ 298.664333][T15432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.664341][T15432] Call Trace: [ 298.664346][T15432] [ 298.664351][T15432] dump_stack_lvl+0x100/0x190 [ 298.664374][T15432] should_fail_ex.cold+0x5/0xa [ 298.664390][T15432] should_failslab+0xc2/0x120 [ 298.664406][T15432] __kmalloc_cache_node_noprof+0x94/0x720 [ 298.664424][T15432] ? __alloc_workqueue+0x1211/0x1950 [ 298.664441][T15432] __alloc_workqueue+0x1211/0x1950 [ 298.664459][T15432] alloc_workqueue_noprof+0xc7/0x130 [ 298.664474][T15432] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 298.664492][T15432] ? lockdep_init_map_type+0x5c/0x250 [ 298.664507][T15432] ? lockdep_init_map_type+0x5c/0x250 [ 298.664522][T15432] __rds_conn_create+0x1234/0x25a0 [ 298.664545][T15432] ? __pfx___rds_conn_create+0x10/0x10 [ 298.664562][T15432] ? trace_kmalloc+0xeb/0x110 [ 298.664575][T15432] ? __kasan_kmalloc+0xaa/0xb0 [ 298.664588][T15432] ? lockdep_init_map_type+0x5c/0x250 [ 298.664602][T15432] rds_conn_create_outgoing+0x44/0x60 [ 298.664622][T15432] rds_sendmsg+0x10da/0x34d0 [ 298.664636][T15432] ? trace_sched_exit_tp+0x120/0x160 [ 298.664658][T15432] ? __pfx_rds_sendmsg+0x10/0x10 [ 298.664677][T15432] ? selinux_socket_sendmsg+0x198/0x2f0 [ 298.664691][T15432] ? ____sys_sendmsg+0xa4d/0xbe0 [ 298.664708][T15432] ____sys_sendmsg+0xa4d/0xbe0 [ 298.664725][T15432] ? __pfx_rds_sendmsg+0x10/0x10 [ 298.664738][T15432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.664775][T15432] ___sys_sendmsg+0x190/0x1e0 [ 298.664788][T15432] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.664801][T15432] ? futex_wait+0x11e/0x370 [ 298.664819][T15432] ? find_held_lock+0x2b/0x80 [ 298.664844][T15432] __sys_sendmsg+0x160/0x210 [ 298.664860][T15432] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.664884][T15432] do_syscall_64+0x123/0x790 [ 298.664902][T15432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.664914][T15432] RIP: 0033:0x7f3126d9e159 [ 298.664923][T15432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.664934][T15432] RSP: 002b:00007f3127c7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.664945][T15432] RAX: ffffffffffffffda RBX: 00007f3127025fa0 RCX: 00007f3126d9e159 [ 298.664953][T15432] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 298.664960][T15432] RBP: 00007f3126e3506b R08: 0000000000000000 R09: 0000000000000000 [ 298.664966][T15432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.664973][T15432] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 298.664987][T15432] [ 298.747203][ T5737] Bluetooth: hci3: command 0x0406 tx timeout [ 298.777725][T15439] FAULT_INJECTION: forcing a failure. [ 298.777725][T15439] name failslab, interval 1, probability 0, space 0, times 0 [ 298.777758][T15439] CPU: 3 UID: 0 PID: 15439 Comm: syz.0.3853 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.777782][T15439] Tainted: [L]=SOFTLOCKUP [ 298.777789][T15439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.777800][T15439] Call Trace: [ 298.777806][T15439] [ 298.777811][T15439] dump_stack_lvl+0x100/0x190 [ 298.777842][T15439] should_fail_ex.cold+0x5/0xa [ 298.777868][T15439] should_failslab+0xc2/0x120 [ 298.777892][T15439] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 298.777913][T15439] ? sock_alloc_inode+0x26/0x2c0 [ 298.777935][T15439] ? __pfx_sock_alloc_inode+0x10/0x10 [ 298.777961][T15439] sock_alloc_inode+0x26/0x2c0 [ 298.777986][T15439] ? __pfx_sock_alloc_inode+0x10/0x10 [ 298.778013][T15439] alloc_inode+0x68/0x250 [ 298.778029][T15439] sock_alloc+0x44/0x280 [ 298.778048][T15439] ? security_socket_create+0x7f/0x250 [ 298.778067][T15439] __sock_create+0xc2/0x860 [ 298.778088][T15439] __sys_socket+0x14d/0x260 [ 298.778107][T15439] ? __pfx___sys_socket+0x10/0x10 [ 298.778126][T15439] __x64_sys_socket+0x72/0xb0 [ 298.778141][T15439] ? lockdep_hardirqs_on+0x7d/0x110 [ 298.778166][T15439] do_syscall_64+0x123/0x790 [ 298.778198][T15439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.778213][T15439] RIP: 0033:0x7f3126d9e159 [ 298.778226][T15439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.778243][T15439] RSP: 002b:00007f3127c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 298.778260][T15439] RAX: ffffffffffffffda RBX: 00007f3127025fa0 RCX: 00007f3126d9e159 [ 298.778272][T15439] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 298.778289][T15439] RBP: 00007f3126e3506b R08: 0000000000000000 R09: 0000000000000000 [ 298.778300][T15439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.778310][T15439] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 298.778327][T15439] [ 298.778336][T15439] socket: no more sockets [ 298.899990][T15327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.906456][T15409] netlink: 'syz.3.3837': attribute type 2 has an invalid length. [ 298.906480][T15409] netlink: 'syz.3.3837': attribute type 2 has an invalid length. [ 299.067099][ T850] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 299.217235][T15460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3863'. [ 299.229436][ T850] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 299.230505][ T850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.230549][ T850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.277226][T15464] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 299.646640][ T850] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 299.655746][ T850] wacom 0003:056A:033B.0004: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 299.658308][ T850] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/0003:056A:033B.0004/input/input6 [ 299.668014][ T43] audit: type=1400 audit(1790152006.940:588): avc: denied { read } for pid=5124 comm="acpid" name="mouse2" dev="devtmpfs" ino=3264 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 299.668608][ T43] audit: type=1400 audit(1790152006.940:589): avc: denied { open } for pid=5124 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3264 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 299.896012][ T43] audit: type=1400 audit(1790152007.160:590): avc: denied { read } for pid=15440 comm="syz.0.3854" name="event4" dev="devtmpfs" ino=3269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 299.896352][ T43] audit: type=1400 audit(1790152007.160:591): avc: denied { open } for pid=15440 comm="syz.0.3854" path="/dev/input/event4" dev="devtmpfs" ino=3269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 299.954506][ T850] usb 5-1: USB disconnect, device number 38 [ 300.047961][T15469] jffs2: notice: (15469) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 300.049917][T15469] jffs2: warning: (15469) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 300.108235][T15474] FAULT_INJECTION: forcing a failure. [ 300.108235][T15474] name failslab, interval 1, probability 0, space 0, times 0 [ 300.108258][T15474] CPU: 3 UID: 0 PID: 15474 Comm: syz.1.3867 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.108273][T15474] Tainted: [L]=SOFTLOCKUP [ 300.108277][T15474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.108284][T15474] Call Trace: [ 300.108288][T15474] [ 300.108293][T15474] dump_stack_lvl+0x100/0x190 [ 300.108320][T15474] should_fail_ex.cold+0x5/0xa [ 300.108337][T15474] should_failslab+0xc2/0x120 [ 300.108354][T15474] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 300.108369][T15474] ? sock_alloc_inode+0x26/0x2c0 [ 300.108387][T15474] ? __pfx_sock_alloc_inode+0x10/0x10 [ 300.108404][T15474] sock_alloc_inode+0x26/0x2c0 [ 300.108420][T15474] ? __pfx_sock_alloc_inode+0x10/0x10 [ 300.108435][T15474] alloc_inode+0x68/0x250 [ 300.108446][T15474] sock_alloc+0x44/0x280 [ 300.108461][T15474] ? security_socket_create+0x7f/0x250 [ 300.108473][T15474] __sock_create+0xc2/0x860 [ 300.108485][T15474] __sys_socket+0x14d/0x260 [ 300.108497][T15474] ? __pfx___sys_socket+0x10/0x10 [ 300.108511][T15474] __x64_sys_socket+0x72/0xb0 [ 300.108522][T15474] ? lockdep_hardirqs_on+0x7d/0x110 [ 300.108539][T15474] do_syscall_64+0x123/0x790 [ 300.108557][T15474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.108569][T15474] RIP: 0033:0x7f50b1d9e159 [ 300.108579][T15474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.108590][T15474] RSP: 002b:00007f50b2bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 300.108602][T15474] RAX: ffffffffffffffda RBX: 00007f50b2025fa0 RCX: 00007f50b1d9e159 [ 300.108609][T15474] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 300.108615][T15474] RBP: 00007f50b1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 300.108622][T15474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.108629][T15474] R13: 00007f50b2026038 R14: 00007f50b2025fa0 R15: 00007ffc50eabc58 [ 300.108643][T15474] [ 300.108649][T15474] socket: no more sockets [ 300.318559][T15489] jffs2: notice: (15489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 300.320530][T15489] jffs2: warning: (15489) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 300.361823][T15493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3875'. [ 300.418284][T15494] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 300.557771][T15501] FAULT_INJECTION: forcing a failure. [ 300.557771][T15501] name failslab, interval 1, probability 0, space 0, times 0 [ 300.557796][T15501] CPU: 3 UID: 0 PID: 15501 Comm: syz.0.3878 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.557824][T15501] Tainted: [L]=SOFTLOCKUP [ 300.557828][T15501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.557835][T15501] Call Trace: [ 300.557839][T15501] [ 300.557844][T15501] dump_stack_lvl+0x100/0x190 [ 300.557864][T15501] should_fail_ex.cold+0x5/0xa [ 300.557881][T15501] should_failslab+0xc2/0x120 [ 300.557898][T15501] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 300.557912][T15501] ? sock_alloc_inode+0x26/0x2c0 [ 300.557929][T15501] ? __pfx_sock_alloc_inode+0x10/0x10 [ 300.557946][T15501] sock_alloc_inode+0x26/0x2c0 [ 300.557962][T15501] ? __pfx_sock_alloc_inode+0x10/0x10 [ 300.557977][T15501] alloc_inode+0x68/0x250 [ 300.557988][T15501] sock_alloc+0x44/0x280 [ 300.558003][T15501] ? security_socket_create+0x7f/0x250 [ 300.558016][T15501] __sock_create+0xc2/0x860 [ 300.558029][T15501] __sys_socket+0x14d/0x260 [ 300.558040][T15501] ? __pfx___sys_socket+0x10/0x10 [ 300.558054][T15501] __x64_sys_socket+0x72/0xb0 [ 300.558065][T15501] ? lockdep_hardirqs_on+0x7d/0x110 [ 300.558082][T15501] do_syscall_64+0x123/0x790 [ 300.558100][T15501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.558111][T15501] RIP: 0033:0x7f3126d9e159 [ 300.558121][T15501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.558131][T15501] RSP: 002b:00007f3127c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 300.558142][T15501] RAX: ffffffffffffffda RBX: 00007f3127025fa0 RCX: 00007f3126d9e159 [ 300.558149][T15501] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 300.558156][T15501] RBP: 00007f3126e3506b R08: 0000000000000000 R09: 0000000000000000 [ 300.558163][T15501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.558170][T15501] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 300.558186][T15501] [ 300.558192][T15501] socket: no more sockets [ 301.286330][ T43] audit: type=1400 audit(1790152008.550:592): avc: denied { accept } for pid=15518 comm="syz.2.3886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 301.459748][T15526] FAULT_INJECTION: forcing a failure. [ 301.459748][T15526] name failslab, interval 1, probability 0, space 0, times 0 [ 301.459789][T15526] CPU: 1 UID: 0 PID: 15526 Comm: syz.0.3889 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.459820][T15526] Tainted: [L]=SOFTLOCKUP [ 301.459828][T15526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.459842][T15526] Call Trace: [ 301.459851][T15526] [ 301.459862][T15526] dump_stack_lvl+0x100/0x190 [ 301.459899][T15526] should_fail_ex.cold+0x5/0xa [ 301.459927][T15526] should_failslab+0xc2/0x120 [ 301.459956][T15526] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 301.459983][T15526] ? sock_alloc_inode+0x26/0x2c0 [ 301.460040][T15526] ? __pfx_sock_alloc_inode+0x10/0x10 [ 301.460077][T15526] sock_alloc_inode+0x26/0x2c0 [ 301.460112][T15526] ? __pfx_sock_alloc_inode+0x10/0x10 [ 301.460142][T15526] alloc_inode+0x68/0x250 [ 301.460163][T15526] sock_alloc+0x44/0x280 [ 301.460190][T15526] ? security_socket_create+0x7f/0x250 [ 301.460214][T15526] __sock_create+0xc2/0x860 [ 301.460240][T15526] __sys_socket+0x14d/0x260 [ 301.460261][T15526] ? fput+0x7c/0x100 [ 301.460290][T15526] ? __pfx___sys_socket+0x10/0x10 [ 301.460312][T15526] ? ksys_write+0x1ac/0x250 [ 301.460333][T15526] ? __pfx_ksys_write+0x10/0x10 [ 301.460360][T15526] __x64_sys_socket+0x72/0xb0 [ 301.460381][T15526] ? lockdep_hardirqs_on+0x7d/0x110 [ 301.460415][T15526] do_syscall_64+0x123/0x790 [ 301.460447][T15526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.460473][T15526] RIP: 0033:0x7f3126d9e159 [ 301.460492][T15526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.460514][T15526] RSP: 002b:00007f3127c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 301.460536][T15526] RAX: ffffffffffffffda RBX: 00007f3127025fa0 RCX: 00007f3126d9e159 [ 301.460554][T15526] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 301.460569][T15526] RBP: 00007f3126e3506b R08: 0000000000000000 R09: 0000000000000000 [ 301.460583][T15526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.460597][T15526] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 301.460627][T15526] [ 301.460699][T15526] socket: no more sockets [ 301.492305][T15528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3890'. [ 301.596357][T15536] nvmet: the ns:1 is already enabled. [ 301.598092][T15536] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 301.641783][ T222] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:19f1f406-a0b6-4fb1-9e6c-748dfbb1bf7b. [ 301.667675][T15536] nvme nvme0: creating 4 I/O queues. [ 301.675711][T15536] nvme nvme0: new ctrl: "testsubsys" [ 301.751012][T15545] jffs2: notice: (15545) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 301.753776][T15545] jffs2: warning: (15545) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 301.932673][T15555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3900'. [ 301.944378][T15557] FAULT_INJECTION: forcing a failure. [ 301.944378][T15557] name failslab, interval 1, probability 0, space 0, times 0 [ 301.944412][T15557] CPU: 0 UID: 0 PID: 15557 Comm: syz.3.3901 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.944440][T15557] Tainted: [L]=SOFTLOCKUP [ 301.944448][T15557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.944460][T15557] Call Trace: [ 301.944468][T15557] [ 301.944476][T15557] dump_stack_lvl+0x100/0x190 [ 301.944511][T15557] should_fail_ex.cold+0x5/0xa [ 301.944541][T15557] should_failslab+0xc2/0x120 [ 301.944567][T15557] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 301.944591][T15557] ? sock_alloc_inode+0x26/0x2c0 [ 301.944621][T15557] ? __pfx_sock_alloc_inode+0x10/0x10 [ 301.944648][T15557] sock_alloc_inode+0x26/0x2c0 [ 301.944675][T15557] ? __pfx_sock_alloc_inode+0x10/0x10 [ 301.944703][T15557] alloc_inode+0x68/0x250 [ 301.944724][T15557] sock_alloc+0x44/0x280 [ 301.944748][T15557] ? security_socket_create+0x7f/0x250 [ 301.944771][T15557] __sock_create+0xc2/0x860 [ 301.944795][T15557] __sys_socket+0x14d/0x260 [ 301.944815][T15557] ? __pfx___sys_socket+0x10/0x10 [ 301.944843][T15557] __x64_sys_socket+0x72/0xb0 [ 301.944864][T15557] ? lockdep_hardirqs_on+0x7d/0x110 [ 301.944893][T15557] do_syscall_64+0x123/0x790 [ 301.944925][T15557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.944948][T15557] RIP: 0033:0x7fd28819e159 [ 301.944966][T15557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.944985][T15557] RSP: 002b:00007fd28907e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 301.945033][T15557] RAX: ffffffffffffffda RBX: 00007fd288425fa0 RCX: 00007fd28819e159 [ 301.945048][T15557] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 301.945062][T15557] RBP: 00007fd28823506b R08: 0000000000000000 R09: 0000000000000000 [ 301.945076][T15557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.945089][T15557] R13: 00007fd288426038 R14: 00007fd288425fa0 R15: 00007ffeb6256b28 [ 301.945117][T15557] [ 301.945161][T15557] socket: no more sockets [ 302.018435][T15563] v: left promiscuous mode [ 302.019416][T15563] v: entered promiscuous mode [ 302.049971][T15565] jffs2: notice: (15565) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 302.052595][T15565] jffs2: warning: (15565) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 302.196725][ T43] audit: type=1400 audit(1790152009.460:593): avc: denied { mount } for pid=15576 comm="syz.2.3911" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 302.253730][ T43] audit: type=1400 audit(1790152009.520:594): avc: denied { unmount } for pid=10830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 302.310638][T15581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3913'. [ 302.339624][T15583] FAULT_INJECTION: forcing a failure. [ 302.339624][T15583] name failslab, interval 1, probability 0, space 0, times 0 [ 302.339644][T15583] CPU: 2 UID: 0 PID: 15583 Comm: syz.2.3914 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.339660][T15583] Tainted: [L]=SOFTLOCKUP [ 302.339664][T15583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.339670][T15583] Call Trace: [ 302.339675][T15583] [ 302.339680][T15583] dump_stack_lvl+0x100/0x190 [ 302.339701][T15583] should_fail_ex.cold+0x5/0xa [ 302.339719][T15583] should_failslab+0xc2/0x120 [ 302.339735][T15583] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 302.339750][T15583] ? sock_alloc_inode+0x26/0x2c0 [ 302.339767][T15583] ? __pfx_sock_alloc_inode+0x10/0x10 [ 302.339784][T15583] sock_alloc_inode+0x26/0x2c0 [ 302.339800][T15583] ? __pfx_sock_alloc_inode+0x10/0x10 [ 302.339815][T15583] alloc_inode+0x68/0x250 [ 302.339826][T15583] sock_alloc+0x44/0x280 [ 302.339841][T15583] ? security_socket_create+0x7f/0x250 [ 302.339854][T15583] __sock_create+0xc2/0x860 [ 302.339866][T15583] __sys_socket+0x14d/0x260 [ 302.339878][T15583] ? __pfx___sys_socket+0x10/0x10 [ 302.339893][T15583] __x64_sys_socket+0x72/0xb0 [ 302.339903][T15583] ? lockdep_hardirqs_on+0x7d/0x110 [ 302.339920][T15583] do_syscall_64+0x123/0x790 [ 302.339939][T15583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.339950][T15583] RIP: 0033:0x7f195079e159 [ 302.339960][T15583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.339970][T15583] RSP: 002b:00007f19515c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 302.339981][T15583] RAX: ffffffffffffffda RBX: 00007f1950a25fa0 RCX: 00007f195079e159 [ 302.339988][T15583] RDX: 0000000000000000 RSI: 0000000000000805 RDI: 0000000000000002 [ 302.339995][T15583] RBP: 00007f195083506b R08: 0000000000000000 R09: 0000000000000000 [ 302.340001][T15583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.340008][T15583] R13: 00007f1950a26038 R14: 00007f1950a25fa0 R15: 00007ffdcd7f3758 [ 302.340022][T15583] [ 302.340028][T15583] socket: no more sockets [ 302.413246][T15588] jffs2: notice: (15588) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 302.415115][T15588] jffs2: warning: (15588) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 302.741737][T15605] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3922'. [ 303.011236][T15612] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 303.148601][T15619] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 303.209689][T15623] jffs2: notice: (15623) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 303.214299][T15623] jffs2: warning: (15623) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 303.500660][T15644] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 303.515701][T15643] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3939'. [ 303.641412][T15654] jffs2: notice: (15654) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 303.645239][T15654] jffs2: warning: (15654) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 303.711459][T15658] FAULT_INJECTION: forcing a failure. [ 303.711459][T15658] name failslab, interval 1, probability 0, space 0, times 0 [ 303.711494][T15658] CPU: 0 UID: 0 PID: 15658 Comm: syz.2.3947 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.711514][T15658] Tainted: [L]=SOFTLOCKUP [ 303.711520][T15658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.711529][T15658] Call Trace: [ 303.711535][T15658] [ 303.711542][T15658] dump_stack_lvl+0x100/0x190 [ 303.711568][T15658] should_fail_ex.cold+0x5/0xa [ 303.711589][T15658] should_failslab+0xc2/0x120 [ 303.711606][T15658] kmem_cache_alloc_noprof+0x92/0x6a0 [ 303.711620][T15658] ? skb_clone+0x190/0x400 [ 303.711640][T15658] skb_clone+0x190/0x400 [ 303.711655][T15658] netlink_deliver_tap+0xaed/0xcc0 [ 303.711672][T15658] netlink_unicast+0x6a5/0x850 [ 303.711687][T15658] ? __pfx_netlink_unicast+0x10/0x10 [ 303.711705][T15658] netlink_ack+0x655/0xb80 [ 303.711722][T15658] nfnetlink_rcv_batch+0x1d52/0x2880 [ 303.711749][T15658] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 303.711771][T15658] ? lock_acquire+0x1d1/0x380 [ 303.711783][T15658] ? avc_has_perm_noaudit+0x56/0x470 [ 303.711806][T15658] ? avc_has_perm_noaudit+0x145/0x470 [ 303.711835][T15658] ? __nla_parse+0x40/0x60 [ 303.711854][T15658] nfnetlink_rcv+0x3bd/0x440 [ 303.711871][T15658] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 303.711891][T15658] netlink_unicast+0x585/0x850 [ 303.711906][T15658] ? __pfx_netlink_unicast+0x10/0x10 [ 303.711925][T15658] netlink_sendmsg+0x8b0/0xda0 [ 303.711942][T15658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.711960][T15658] ? selinux_socket_sendmsg+0x198/0x2f0 [ 303.711976][T15658] ____sys_sendmsg+0xa4d/0xbe0 [ 303.712002][T15658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.712019][T15658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.712047][T15658] ___sys_sendmsg+0x190/0x1e0 [ 303.712065][T15658] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.712078][T15658] ? futex_wait+0x11e/0x370 [ 303.712099][T15658] ? find_held_lock+0x2b/0x80 [ 303.712128][T15658] __sys_sendmsg+0x160/0x210 [ 303.712146][T15658] ? __pfx___sys_sendmsg+0x10/0x10 [ 303.712168][T15658] do_syscall_64+0x123/0x790 [ 303.712187][T15658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.712199][T15658] RIP: 0033:0x7f195079e159 [ 303.712210][T15658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.712221][T15658] RSP: 002b:00007f19515c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.712236][T15658] RAX: ffffffffffffffda RBX: 00007f1950a25fa0 RCX: 00007f195079e159 [ 303.712245][T15658] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 303.712252][T15658] RBP: 00007f195083506b R08: 0000000000000000 R09: 0000000000000000 [ 303.712259][T15658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.712266][T15658] R13: 00007f1950a26038 R14: 00007f1950a25fa0 R15: 00007ffdcd7f3758 [ 303.712280][T15658] [ 303.772745][T15664] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 303.857146][ T5733] Bluetooth: hci0: command 0x0406 tx timeout [ 303.997283][ T35] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 304.147793][ T35] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.149027][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.149052][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.149072][ T35] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.149107][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.152330][ T35] usb 8-1: config 0 descriptor?? [ 304.201624][T15675] netlink: 'syz.0.3953': attribute type 2 has an invalid length. [ 304.201641][T15675] netlink: 'syz.0.3953': attribute type 2 has an invalid length. [ 304.217179][ T1042] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 304.377656][ T1042] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 304.378518][ T1042] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.378550][ T1042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.564874][ T35] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 304.578511][ T35] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 304.588703][ T1042] dvb_ttusb_budget: ttusb_init_controller: error [ 304.592896][ T1042] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 304.669470][ T1042] DVB: Unable to find symbol stv0299_attach() [ 304.707697][ T1042] DVB: Unable to find symbol tda8083_attach() [ 304.707711][ T1042] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 304.822043][ T1042] usb 8-1: USB disconnect, device number 30 [ 304.863007][T15689] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 304.865313][T15687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.865810][T15687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.125870][ T43] audit: type=1400 audit(1790152012.390:595): avc: denied { unmount } for pid=10830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 305.370082][T15717] netlink: 'syz.0.3969': attribute type 2 has an invalid length. [ 305.370104][T15717] netlink: 'syz.0.3969': attribute type 2 has an invalid length. [ 306.287833][T15731] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 306.872591][T15740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3978'. [ 306.986780][T15740] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 307.008279][ T850] usb 6-1: USB disconnect, device number 21 [ 307.074364][T15749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3982'. [ 307.134253][T15751] jffs2: notice: (15751) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 307.143611][T15751] jffs2: warning: (15751) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 307.193051][T15756] No source specified [ 307.241173][T15759] serial 00:04: in use; can't configure [ 307.241414][T15759] serial 00:04: in use; can't configure [ 307.241553][T15759] serial 00:04: in use; can't configure [ 307.334910][T15769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3989'. [ 307.404440][T15774] jffs2: notice: (15774) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 307.408310][T15774] jffs2: warning: (15774) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 307.458520][T15777] FAULT_INJECTION: forcing a failure. [ 307.458520][T15777] name failslab, interval 1, probability 0, space 0, times 0 [ 307.458544][T15777] CPU: 2 UID: 0 PID: 15777 Comm: syz.0.3994 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.458561][T15777] Tainted: [L]=SOFTLOCKUP [ 307.458566][T15777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.458573][T15777] Call Trace: [ 307.458578][T15777] [ 307.458583][T15777] dump_stack_lvl+0x100/0x190 [ 307.458608][T15777] should_fail_ex.cold+0x5/0xa [ 307.458629][T15777] should_failslab+0xc2/0x120 [ 307.458647][T15777] __kmalloc_noprof+0xfc/0x840 [ 307.458662][T15777] ? fib6_info_alloc+0x40/0x160 [ 307.458678][T15777] fib6_info_alloc+0x40/0x160 [ 307.458691][T15777] ip6_route_info_create+0x14c/0xad0 [ 307.458709][T15777] addrconf_f6i_alloc+0x2d9/0x670 [ 307.458747][T15777] ? __pfx_addrconf_f6i_alloc+0x10/0x10 [ 307.458766][T15777] ? __lock_acquire+0xe8b/0x1f40 [ 307.458871][T15777] ? do_raw_write_lock+0x11e/0x260 [ 307.458929][T15777] ? __pfx_do_raw_write_lock+0x10/0x10 [ 307.458965][T15777] __ipv6_dev_ac_inc+0x2f8/0xdb0 [ 307.458996][T15777] ipv6_sock_ac_join+0x67c/0xd80 [ 307.459022][T15777] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 307.459091][T15777] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 307.459118][T15777] ? __local_bh_enable_ip+0xa5/0x120 [ 307.459141][T15777] ? lockdep_hardirqs_on+0x7d/0x110 [ 307.459169][T15777] do_ipv6_setsockopt+0x3874/0x44a0 [ 307.459188][T15777] ? avc_has_perm_noaudit+0x56/0x470 [ 307.459210][T15777] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 307.459226][T15777] ? avc_has_perm_noaudit+0x145/0x470 [ 307.459245][T15777] ? avc_has_perm+0x135/0x1e0 [ 307.459262][T15777] ? __pfx_avc_has_perm+0x10/0x10 [ 307.459281][T15777] ? futex_wait+0x11e/0x370 [ 307.459296][T15777] ? sock_has_perm+0x25a/0x2f0 [ 307.459307][T15777] ? __pfx_sock_has_perm+0x10/0x10 [ 307.459318][T15777] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 307.459337][T15777] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 307.459361][T15777] ? ipv6_setsockopt+0xcb/0x170 [ 307.459377][T15777] ipv6_setsockopt+0xcb/0x170 [ 307.459392][T15777] udpv6_setsockopt+0x64/0xb0 [ 307.459413][T15777] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 307.459433][T15777] do_sock_setsockopt+0xf3/0x1d0 [ 307.459457][T15777] __sys_setsockopt+0x195/0x220 [ 307.459477][T15777] __x64_sys_setsockopt+0xbd/0x160 [ 307.459492][T15777] ? do_syscall_64+0xae/0x790 [ 307.459509][T15777] ? lockdep_hardirqs_on+0x7d/0x110 [ 307.459529][T15777] do_syscall_64+0x123/0x790 [ 307.459552][T15777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.459566][T15777] RIP: 0033:0x7f3126d9e159 [ 307.459579][T15777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.459590][T15777] RSP: 002b:00007f3127c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 307.459604][T15777] RAX: ffffffffffffffda RBX: 00007f3127025fa0 RCX: 00007f3126d9e159 [ 307.459614][T15777] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000005 [ 307.459622][T15777] RBP: 00007f3126e3506b R08: 0000000000000014 R09: 0000000000000000 [ 307.459630][T15777] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 307.459638][T15777] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 307.459655][T15777] [ 307.522851][T15781] No source specified [ 307.760453][ T43] audit: type=1800 audit(1790152015.020:596): pid=15792 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.4001" name="devlink" dev="sda1" ino=2045 res=0 errno=0 [ 307.762510][T15792] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 0 (only 8 groups) [ 307.828487][T15795] jffs2: notice: (15795) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 307.834491][T15795] jffs2: warning: (15795) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 308.132938][T15804] ip_tables: iptables: counters copy to user failed while replacing table [ 308.188126][T15807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4006'. [ 308.188151][T15807] openvswitch: netlink: Flow key attr not present in new flow. [ 308.651188][T15818] jffs2: notice: (15818) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 308.654371][T15818] jffs2: warning: (15818) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 308.807644][ T5826] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 309.001871][ T5826] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 309.004464][ T5826] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.004812][ T5826] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.005199][ T5826] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 309.005313][ T5826] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.032562][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.032601][ T5826] usb 6-1: Product: syz [ 309.032611][ T5826] usb 6-1: Manufacturer: syz [ 309.032618][ T5826] usb 6-1: SerialNumber: syz [ 309.113659][ T5826] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 309.113690][ T5826] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 309.113734][ T5826] usbserial_generic 6-1:1.0: generic converter detected [ 309.145598][ T5826] usb 6-1: generic converter now attached to ttyUSB0 [ 309.315799][ T3271] usb 6-1: USB disconnect, device number 22 [ 309.356461][ T3271] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 309.356778][ T3271] usbserial_generic 6-1:1.0: device disconnected [ 309.739215][T15839] jffs2: notice: (15839) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 309.741436][T15839] jffs2: warning: (15839) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 309.886453][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4026'. [ 310.076754][T15852] kvm [15849]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 310.077470][T15852] kvm [15849]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 310.101590][T15852] kvm [15849]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 310.103200][T15864] jffs2: notice: (15864) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 310.106529][T15864] jffs2: warning: (15864) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 310.130685][T15852] kvm [15849]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 310.131335][T15852] kvm [15849]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 310.211502][T15870] xt_hashlimit: max too large, truncated to 1048576 [ 310.211706][T15870] xt_hashlimit: size too large, truncated to 1048576 [ 310.211880][T15870] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 310.217233][ T850] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 311.253576][ T850] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 311.254462][ T850] usb 6-1: config 0 has no interfaces? [ 311.268871][ T850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.268929][ T850] usb 6-1: Product: syz [ 311.268938][ T850] usb 6-1: Manufacturer: syz [ 311.268945][ T850] usb 6-1: SerialNumber: syz [ 311.272655][ T850] usb 6-1: config 0 descriptor?? [ 311.396436][T15884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4037'. [ 311.467804][T15885] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 311.504618][ T850] usb 6-1: USB disconnect, device number 23 [ 312.028181][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.816595][T15919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4046'. [ 312.956985][T15929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4050'. [ 313.014080][T15931] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 314.464964][ T43] audit: type=1400 audit(1790152021.730:597): avc: denied { write } for pid=15957 comm="syz.2.4058" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 314.963286][T15972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4063'. [ 315.022922][T15973] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 315.677095][ T5826] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 315.756342][ T43] audit: type=1400 audit(1790152023.020:598): avc: denied { append } for pid=15995 comm="syz.1.4072" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 315.828562][ T5826] usb 5-1: Using ep0 maxpacket: 32 [ 315.831794][ T5826] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 315.834869][ T5826] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 315.834897][ T5826] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 315.834911][ T5826] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.834925][ T5826] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 315.836783][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.836799][ T5826] usb 5-1: Product: syz [ 315.836807][ T5826] usb 5-1: Manufacturer: syz [ 315.836815][ T5826] usb 5-1: SerialNumber: syz [ 315.851907][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 315.861932][ T5826] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input10 [ 315.871401][ T43] audit: type=1400 audit(1790152023.140:599): avc: denied { ioctl } for pid=5124 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3304 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.881186][T16005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4076'. [ 316.107306][ T5826] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 316.107332][ T5826] (id 0x00) [ 316.198104][T16014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.199347][T16014] fuse: Bad value for 'fd' [ 316.200325][ T43] audit: type=1400 audit(1790152023.470:600): avc: denied { remount } for pid=16010 comm="syz.1.4079" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 316.428220][ T5826] rc_core: IR keymap rc-imon-pad not found [ 316.428236][ T5826] Registered IR keymap rc-empty [ 316.428276][ T5826] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 316.428287][ T5826] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 316.450728][ T5826] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 316.455828][ T5826] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input11 [ 316.473650][ T5826] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:39> initialized [ 316.651750][ T43] audit: type=1400 audit(1790152023.920:601): avc: denied { write } for pid=16017 comm="syz.3.4081" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 317.081418][T16022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4082'. [ 317.333905][T16025] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 317.981584][ T43] audit: type=1400 audit(1790152025.250:602): avc: denied { connect } for pid=15976 comm="syz.0.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.106244][T16033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4085'. [ 318.192298][T16026] imon:send_packet: task interrupted [ 318.192374][T16026] imon:send_packet: packet tx failed (-512) [ 318.193634][T16026] imon:vfd_write: send packet #2 failed [ 318.209216][ T5919] usb 5-1: USB disconnect, device number 39 [ 318.565692][T15986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.602489][T16044] netlink: 'syz.3.4090': attribute type 6 has an invalid length. [ 318.697749][ T63] libceph: connect (1)[c::]:6789 error -22 [ 318.698303][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 318.877060][ T43] audit: type=1400 audit(1790152026.130:603): avc: denied { unmount } for pid=16057 comm="syz.0.4095" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 318.939873][ T25] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 318.958811][ T5919] libceph: connect (1)[c::]:6789 error -22 [ 318.959022][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 319.087845][ T25] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 319.088796][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.088833][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.088851][ T25] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 319.088869][ T25] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.090649][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.090668][ T25] usb 7-1: Product: syz [ 319.090680][ T25] usb 7-1: Manufacturer: syz [ 319.090691][ T25] usb 7-1: SerialNumber: syz [ 319.096332][ T25] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 319.096352][ T25] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 319.096380][ T25] usbserial_generic 7-1:1.0: generic converter detected [ 319.107390][ T25] usb 7-1: generic converter now attached to ttyUSB0 [ 319.311019][ T25] usb 7-1: USB disconnect, device number 21 [ 319.319996][ T25] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 319.320457][ T25] usbserial_generic 7-1:1.0: device disconnected [ 319.484815][ T5919] libceph: connect (1)[c::]:6789 error -22 [ 319.484982][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 319.490888][T16050] ceph: No mds server is up or the cluster is laggy [ 319.584857][T16061] No source specified [ 319.647547][T16065] jffs2: notice: (16065) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 319.772559][T16072] FAULT_INJECTION: forcing a failure. [ 319.772559][T16072] name failslab, interval 1, probability 0, space 0, times 0 [ 319.772583][T16072] CPU: 3 UID: 0 PID: 16072 Comm: syz.1.4101 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.772601][T16072] Tainted: [L]=SOFTLOCKUP [ 319.772606][T16072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.772613][T16072] Call Trace: [ 319.772618][T16072] [ 319.772623][T16072] dump_stack_lvl+0x100/0x190 [ 319.772676][T16072] should_fail_ex.cold+0x5/0xa [ 319.772706][T16072] should_failslab+0xc2/0x120 [ 319.772736][T16072] __kmalloc_cache_node_noprof+0x94/0x720 [ 319.772752][T16072] ? register_lock_class+0x3f/0x7b0 [ 319.772767][T16072] ? blkg_alloc+0xbd/0xf80 [ 319.772784][T16072] blkg_alloc+0xbd/0xf80 [ 319.772798][T16072] ? __pfx___might_resched+0x10/0x10 [ 319.772810][T16072] ? __xas_nomem+0x1b4/0x670 [ 319.772831][T16072] ? xas_load+0x44/0x5c0 [ 319.772845][T16072] blkcg_init_disk+0x183/0x700 [ 319.772861][T16072] ? __pfx_blkcg_init_disk+0x10/0x10 [ 319.772875][T16072] ? lock_acquire+0x1d1/0x380 [ 319.772887][T16072] ? find_held_lock+0x2b/0x80 [ 319.772904][T16072] ? __alloc_disk_node+0x2d4/0x6b0 [ 319.772923][T16072] ? __alloc_disk_node+0x2d4/0x6b0 [ 319.772975][T16072] __alloc_disk_node+0x2f6/0x6b0 [ 319.773011][T16072] __blk_alloc_disk+0xd2/0x170 [ 319.773034][T16072] ? __pfx___blk_alloc_disk+0x10/0x10 [ 319.773051][T16072] ? __pfx___debug_object_init+0x10/0x10 [ 319.773077][T16072] ? lockdep_init_map_type+0x5c/0x250 [ 319.773092][T16072] ? lockdep_init_map_type+0x5c/0x250 [ 319.773109][T16072] dm_create+0x5e8/0x1530 [ 319.773133][T16072] dev_create+0x121/0x2a0 [ 319.773145][T16072] ? __pfx_dev_create+0x10/0x10 [ 319.773160][T16072] ctl_ioctl+0x4d2/0xcc0 [ 319.773170][T16072] ? __pfx_dev_create+0x10/0x10 [ 319.773182][T16072] ? __pfx_ctl_ioctl+0x10/0x10 [ 319.773208][T16072] ? selinux_file_ioctl+0x13b/0x290 [ 319.773225][T16072] ? selinux_file_ioctl+0xb6/0x290 [ 319.773240][T16072] dm_ctl_ioctl+0x22/0x30 [ 319.773250][T16072] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 319.773261][T16072] __x64_sys_ioctl+0x18e/0x210 [ 319.773279][T16072] do_syscall_64+0x123/0x790 [ 319.773302][T16072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.773322][T16072] RIP: 0033:0x7f50b1d9e159 [ 319.773338][T16072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.773355][T16072] RSP: 002b:00007f50b2bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.773375][T16072] RAX: ffffffffffffffda RBX: 00007f50b2025fa0 RCX: 00007f50b1d9e159 [ 319.773388][T16072] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 319.773403][T16072] RBP: 00007f50b1e3506b R08: 0000000000000000 R09: 0000000000000000 [ 319.773415][T16072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.773428][T16072] R13: 00007f50b2026038 R14: 00007f50b2025fa0 R15: 00007ffc50eabc58 [ 319.773452][T16072] [ 319.930352][T16077] FAULT_INJECTION: forcing a failure. [ 319.930352][T16077] name failslab, interval 1, probability 0, space 0, times 0 [ 319.930389][T16077] CPU: 2 UID: 0 PID: 16077 Comm: syz.1.4102 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.930417][T16077] Tainted: [L]=SOFTLOCKUP [ 319.930425][T16077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.930438][T16077] Call Trace: [ 319.930445][T16077] [ 319.930456][T16077] dump_stack_lvl+0x100/0x190 [ 319.930490][T16077] should_fail_ex.cold+0x5/0xa [ 319.930537][T16077] should_failslab+0xc2/0x120 [ 319.930565][T16077] __kmalloc_cache_noprof+0x91/0x6d0 [ 319.930594][T16077] ? __hw_addr_create+0x57/0x220 [ 319.930629][T16077] __hw_addr_create+0x57/0x220 [ 319.930665][T16077] __hw_addr_add_ex+0x32b/0x650 [ 319.930696][T16077] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 319.930727][T16077] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 319.930760][T16077] dev_mc_add+0xb6/0x110 [ 319.930783][T16077] igmp6_group_added+0x3e4/0x4c0 [ 319.930806][T16077] ? __pfx_igmp6_group_added+0x10/0x10 [ 319.930829][T16077] ? mld_del_delrec+0x425/0xf80 [ 319.930857][T16077] __ipv6_dev_mc_inc+0x720/0xc80 [ 319.930894][T16077] addrconf_join_solict+0x109/0x160 [ 319.930919][T16077] ? __pfx_addrconf_join_solict+0x10/0x10 [ 319.930946][T16077] ? __local_bh_enable_ip+0xa5/0x120 [ 319.930969][T16077] ? lockdep_hardirqs_on+0x7d/0x110 [ 319.931044][T16077] __ipv6_dev_ac_inc+0x938/0xdb0 [ 319.931077][T16077] ipv6_sock_ac_join+0x67c/0xd80 [ 319.931103][T16077] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 319.931125][T16077] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 319.931151][T16077] ? __local_bh_enable_ip+0xa5/0x120 [ 319.931172][T16077] ? lockdep_hardirqs_on+0x7d/0x110 [ 319.931208][T16077] do_ipv6_setsockopt+0x3874/0x44a0 [ 319.931232][T16077] ? avc_has_perm_noaudit+0x56/0x470 [ 319.931268][T16077] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 319.931297][T16077] ? avc_has_perm_noaudit+0x145/0x470 [ 319.931327][T16077] ? avc_has_perm+0x135/0x1e0 [ 319.931355][T16077] ? __pfx_avc_has_perm+0x10/0x10 [ 319.931387][T16077] ? futex_wait+0x11e/0x370 [ 319.931411][T16077] ? sock_has_perm+0x25a/0x2f0 [ 319.931432][T16077] ? __pfx_sock_has_perm+0x10/0x10 [ 319.931511][T16077] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 319.931539][T16077] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 319.931571][T16077] ? ipv6_setsockopt+0xcb/0x170 [ 319.931592][T16077] ipv6_setsockopt+0xcb/0x170 [ 319.931621][T16077] udpv6_setsockopt+0x64/0xb0 [ 319.931651][T16077] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 319.931686][T16077] do_sock_setsockopt+0xf3/0x1d0 [ 319.931721][T16077] __sys_setsockopt+0x195/0x220 [ 319.931761][T16077] __x64_sys_setsockopt+0xbd/0x160 [ 319.931785][T16077] ? do_syscall_64+0xae/0x790 [ 319.931815][T16077] ? lockdep_hardirqs_on+0x7d/0x110 [ 319.931847][T16077] do_syscall_64+0x123/0x790 [ 319.931880][T16077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.931901][T16077] RIP: 0033:0x7f50b1d9e159 [ 319.931919][T16077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.931937][T16077] RSP: 002b:00007f50b2bd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.931958][T16077] RAX: ffffffffffffffda RBX: 00007f50b2025fa0 RCX: 00007f50b1d9e159 [ 319.931971][T16077] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 319.931983][T16077] RBP: 00007f50b1e3506b R08: 0000000000000014 R09: 0000000000000000 [ 319.931995][T16077] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 319.932007][T16077] R13: 00007f50b2026038 R14: 00007f50b2025fa0 R15: 00007ffc50eabc58 [ 319.932033][T16077] [ 320.085801][T16090] jffs2: notice: (16090) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 320.146287][T16097] FAULT_INJECTION: forcing a failure. [ 320.146287][T16097] name failslab, interval 1, probability 0, space 0, times 0 [ 320.146313][T16097] CPU: 2 UID: 0 PID: 16097 Comm: syz.0.4111 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.146331][T16097] Tainted: [L]=SOFTLOCKUP [ 320.146336][T16097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.146344][T16097] Call Trace: [ 320.146349][T16097] [ 320.146354][T16097] dump_stack_lvl+0x100/0x190 [ 320.146377][T16097] should_fail_ex.cold+0x5/0xa [ 320.146394][T16097] should_failslab+0xc2/0x120 [ 320.146411][T16097] __kmalloc_cache_node_noprof+0x94/0x720 [ 320.146428][T16097] ? register_lock_class+0x3f/0x7b0 [ 320.146447][T16097] ? blkg_alloc+0xbd/0xf80 [ 320.146471][T16097] blkg_alloc+0xbd/0xf80 [ 320.146494][T16097] ? __pfx___might_resched+0x10/0x10 [ 320.146516][T16097] ? __xas_nomem+0x1b4/0x670 [ 320.146545][T16097] ? xas_load+0x44/0x5c0 [ 320.146566][T16097] blkcg_init_disk+0x183/0x700 [ 320.146589][T16097] ? __pfx_blkcg_init_disk+0x10/0x10 [ 320.146611][T16097] ? lock_acquire+0x1d1/0x380 [ 320.146633][T16097] ? find_held_lock+0x2b/0x80 [ 320.146655][T16097] ? __alloc_disk_node+0x2d4/0x6b0 [ 320.146672][T16097] ? __alloc_disk_node+0x2d4/0x6b0 [ 320.146693][T16097] __alloc_disk_node+0x2f6/0x6b0 [ 320.146714][T16097] __blk_alloc_disk+0xd2/0x170 [ 320.146732][T16097] ? __pfx___blk_alloc_disk+0x10/0x10 [ 320.146748][T16097] ? __pfx___debug_object_init+0x10/0x10 [ 320.146770][T16097] ? lockdep_init_map_type+0x5c/0x250 [ 320.146783][T16097] ? lockdep_init_map_type+0x5c/0x250 [ 320.146799][T16097] dm_create+0x5e8/0x1530 [ 320.146818][T16097] dev_create+0x121/0x2a0 [ 320.146831][T16097] ? __pfx_dev_create+0x10/0x10 [ 320.146846][T16097] ctl_ioctl+0x4d2/0xcc0 [ 320.146856][T16097] ? __pfx_dev_create+0x10/0x10 [ 320.146868][T16097] ? __pfx_ctl_ioctl+0x10/0x10 [ 320.146892][T16097] ? selinux_file_ioctl+0x13b/0x290 [ 320.146905][T16097] ? selinux_file_ioctl+0xb6/0x290 [ 320.146920][T16097] dm_ctl_ioctl+0x22/0x30 [ 320.146957][T16097] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 320.146998][T16097] __x64_sys_ioctl+0x18e/0x210 [ 320.147025][T16097] do_syscall_64+0x123/0x790 [ 320.147056][T16097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.147072][T16097] RIP: 0033:0x7f3126d9e159 [ 320.147084][T16097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.147096][T16097] RSP: 002b:00007f3127c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.147109][T16097] RAX: ffffffffffffffda RBX: 00007f3127025fa0 RCX: 00007f3126d9e159 [ 320.147117][T16097] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 320.147125][T16097] RBP: 00007f3126e3506b R08: 0000000000000000 R09: 0000000000000000 [ 320.147133][T16097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.147141][T16097] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 320.147158][T16097] [ 320.330202][T16102] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 320.562182][ T43] audit: type=1800 audit(1790152027.830:604): pid=16070 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4100" name="cpuset.effective_cpus" dev="sda1" ino=2043 res=0 errno=0 [ 321.166790][T16118] jffs2: notice: (16118) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 321.171268][T16118] jffs2: warning: (16118) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 321.191455][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4122'. [ 321.445762][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4133'. [ 321.445898][T16143] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4131'. [ 321.450468][T16146] jffs2: notice: (16146) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 321.454078][T16146] jffs2: warning: (16146) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 321.500743][ T43] audit: type=1400 audit(1790152028.770:605): avc: denied { append } for pid=16150 comm="syz.3.4135" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 321.500996][ T43] audit: type=1400 audit(1790152028.770:606): avc: denied { ioctl } for pid=16150 comm="syz.3.4135" path="/dev/uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 321.686037][ T43] audit: type=1800 audit(1790152028.950:607): pid=16165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4138" name="syzkaller0" dev="sda1" ino=2046 res=0 errno=0 [ 322.241930][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'. [ 322.354523][T16176] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4144'. [ 322.462529][T16178] jffs2: notice: (16178) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 322.465295][T16178] jffs2: warning: (16178) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 322.628737][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4151'. [ 322.730372][T16197] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4153'. [ 323.418076][T16202] jffs2: notice: (16202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 323.727878][ T1346] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 323.760401][ T930] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 323.887742][ T1346] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 323.890608][ T1346] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.890630][ T1346] usb 7-1: Product: syz [ 323.890638][ T1346] usb 7-1: Manufacturer: syz [ 323.890646][ T1346] usb 7-1: SerialNumber: syz [ 323.896699][ T1346] pl2303 7-1:1.0: required endpoints missing [ 323.909409][ T930] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 323.910668][ T930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.910695][ T930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.910713][ T930] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 323.910744][ T930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.913763][ T930] usb 6-1: config 0 descriptor?? [ 323.940398][ T43] audit: type=1400 audit(1790152031.210:608): avc: denied { read } for pid=16222 comm="syz.0.4164" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 323.940445][ T43] audit: type=1400 audit(1790152031.210:609): avc: denied { open } for pid=16222 comm="syz.0.4164" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 324.396996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 324.757014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 324.827178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 324.856960][ T43] audit: type=1400 audit(1790152031.570:610): avc: denied { read } for pid=16206 comm="syz.2.4157" path="socket:[58716]" dev="sockfs" ino=58716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 324.861611][ T930] usbhid 6-1:0.0: can't add hid device: -71 [ 324.862132][ T930] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 324.867935][ T930] usb 6-1: USB disconnect, device number 24 [ 325.075036][T16228] jffs2: notice: (16228) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 325.129908][T16231] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4167'. [ 325.441125][ T1042] usb 7-1: USB disconnect, device number 22 [ 325.586554][T16242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4171'. [ 325.645065][T16243] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 325.717183][ T5919] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 325.878260][ T5919] usb 6-1: New USB device found, idVendor=09da, idProduct=002b, bcdDevice= 0.00 [ 325.878298][ T5919] usb 6-1: no configurations [ 325.878308][ T5919] usb 6-1: can't read configurations, error -22 [ 326.077111][ T5919] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 326.113964][T16247] ip_tables: iptables: counters copy to user failed while replacing table [ 326.158227][T16249] jffs2: notice: (16249) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 326.251797][ T5919] usb 6-1: New USB device found, idVendor=09da, idProduct=002b, bcdDevice= 0.00 [ 326.251823][ T5919] usb 6-1: no configurations [ 326.251830][ T5919] usb 6-1: can't read configurations, error -22 [ 326.254872][ T5919] usb usb6-port1: attempt power cycle [ 326.275861][T16254] jffs2: notice: (16254) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 326.281945][T16254] jffs2: warning: (16254) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 326.316864][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4178'. [ 326.316886][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4178'. [ 326.403966][ T43] audit: type=1400 audit(1790152033.670:611): avc: denied { read } for pid=16263 comm="syz.3.4180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 326.541937][ T25] libceph: connect (1)[c::]:6789 error -22 [ 326.542065][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 326.552323][T16277] i2c i2c-0: Failed to register i2c client tps6598x at 0x20 (-16) [ 326.607162][ T5919] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 326.633014][ T5919] usb 6-1: New USB device found, idVendor=09da, idProduct=002b, bcdDevice= 0.00 [ 326.633041][ T5919] usb 6-1: no configurations [ 326.633047][ T5919] usb 6-1: can't read configurations, error -22 [ 326.777199][ T5919] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 326.799041][ T25] libceph: connect (1)[c::]:6789 error -22 [ 326.799167][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 326.800659][ T5919] usb 6-1: New USB device found, idVendor=09da, idProduct=002b, bcdDevice= 0.00 [ 326.800696][ T5919] usb 6-1: no configurations [ 326.800708][ T5919] usb 6-1: can't read configurations, error -22 [ 326.801369][ T5919] usb usb6-port1: unable to enumerate USB device [ 327.254057][T16273] ceph: No mds server is up or the cluster is laggy [ 327.542562][ T43] audit: type=1800 audit(1790152034.810:612): pid=16292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4189" name="syzkaller0" dev="sda1" ino=2046 res=0 errno=0 [ 327.956216][T16297] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4191'. [ 329.041769][ T43] audit: type=1800 audit(1790152036.310:613): pid=16303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4193" name="cpuset.effective_cpus" dev="sda1" ino=2043 res=0 errno=0 [ 329.155435][ T43] audit: type=1400 audit(1790152036.420:614): avc: denied { sqpoll } for pid=16313 comm="syz.1.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 329.159021][T16314] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 329.334416][ T43] audit: type=1400 audit(1790152036.600:615): avc: denied { append } for pid=16323 comm="syz.2.4200" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 329.334765][ T43] audit: type=1400 audit(1790152036.600:616): avc: denied { open } for pid=16323 comm="syz.2.4200" path="/471/dev/cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 329.381109][T16326] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4201'. [ 329.417093][T16328] jffs2: notice: (16328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 329.421810][T16328] jffs2: warning: (16328) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=28 [ 329.531946][T16333] netlink: zone id is out of range [ 329.531958][T16333] netlink: zone id is out of range [ 329.531962][T16333] netlink: zone id is out of range [ 329.531967][T16333] netlink: zone id is out of range [ 329.531971][T16333] netlink: zone id is out of range [ 329.531974][T16333] netlink: zone id is out of range [ 329.531978][T16333] netlink: zone id is out of range [ 329.531982][T16333] netlink: zone id is out of range [ 329.531986][T16333] netlink: zone id is out of range [ 329.777211][ T1346] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 329.927105][ T1346] usb 7-1: device descriptor read/64, error -71 [ 329.929736][ T25] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 330.032169][T16354] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4212'. [ 330.070777][T16356] jffs2: notice: (16356) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 1 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 330.073712][T16356] jffs2: warning: (16356) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=48 [ 330.087893][ T25] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 330.090275][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 330.090301][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 330.094126][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.094148][ T25] usb 8-1: Product: syz [ 330.094159][ T25] usb 8-1: Manufacturer: syz [ 330.094170][ T25] usb 8-1: SerialNumber: syz [ 330.197234][ T1346] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 330.327132][ T25] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 330.332863][ T25] usb 8-1: USB disconnect, device number 31 [ 330.337610][ T1346] usb 7-1: device descriptor read/64, error -71 [ 330.340511][ T25] usblp0: removed [ 330.447322][ T1346] usb usb7-port1: attempt power cycle [ 330.787128][ T1346] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 330.809431][ T1346] usb 7-1: device descriptor read/8, error -71 [ 330.842738][T16372] FAULT_INJECTION: forcing a failure. [ 330.842738][T16372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.842764][T16372] CPU: 3 UID: 0 PID: 16372 Comm: syz.0.4219 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.842780][T16372] Tainted: [L]=SOFTLOCKUP [ 330.842784][T16372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.842790][T16372] Call Trace: [ 330.842795][T16372] [ 330.842801][T16372] dump_stack_lvl+0x100/0x190 [ 330.842825][T16372] should_fail_ex.cold+0x5/0xa [ 330.842841][T16372] _copy_from_user+0x2e/0xd0 [ 330.842856][T16372] get_timespec64+0x8d/0x240 [ 330.842868][T16372] ? __pfx_get_timespec64+0x10/0x10 [ 330.842882][T16372] ? __x64_sys_futex+0x34f/0x4d0 [ 330.842900][T16372] __x64_sys_recvmmsg+0x166/0x280 [ 330.842918][T16372] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 330.842972][T16372] do_syscall_64+0x123/0x790 [ 330.842993][T16372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.843006][T16372] RIP: 0033:0x7f3126d9e159 [ 330.843020][T16372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.843036][T16372] RSP: 002b:00007f3127c7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 330.843052][T16372] RAX: ffffffffffffffda RBX: 00007f3127025fa0 RCX: 00007f3126d9e159 [ 330.843065][T16372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 330.843077][T16372] RBP: 00007f3126e3506b R08: 0000200000003700 R09: 0000000000000000 [ 330.843090][T16372] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000000 [ 330.843101][T16372] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 330.843118][T16372] [ 330.906467][T16376] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4221'. [ 331.717072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 331.737079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 331.832459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 331.837311][ T1346] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 331.859762][ T1346] usb 7-1: device descriptor read/8, error -71 [ 331.862234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 331.876208][T16386] jffs2: notice: (16386) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 1 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 331.881320][T16386] jffs2: warning: (16386) do_jffs2_setxattr: jffs2_reserve_space()=-28, request=48 [ 331.967454][ T1346] usb usb7-port1: unable to enumerate USB device [ 332.709380][T16383] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 332.742190][T16383] pci 0000:00:00.0: Adding to iommu group 0 [ 332.945407][T16405] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4230'. [ 333.023971][ T43] audit: type=1400 audit(1790152040.290:617): avc: denied { write } for pid=16407 comm="syz.0.4231" name="usb_gadget" dev="configfs" ino=49598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 333.034292][ T43] audit: type=1400 audit(1790152040.300:618): avc: denied { write } for pid=16407 comm="syz.0.4231" name="naa.5001405000000001" dev="configfs" ino=60739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 333.115818][ T43] audit: type=1400 audit(1790152040.380:619): avc: denied { write } for pid=16407 comm="syz.0.4231" name="c.1" dev="configfs" ino=47515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 333.138179][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4232'. [ 333.144891][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4233'. [ 333.164395][ T43] audit: type=1400 audit(1790152040.400:620): avc: denied { write } for pid=16407 comm="syz.0.4231" name="c.1" dev="configfs" ino=47515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 333.164511][T16408] [ 333.173129][T16408] ====================================================== [ 333.175869][T16408] WARNING: possible circular locking dependency detected [ 333.178820][T16408] syzkaller #0 Tainted: G L [ 333.181528][T16408] ------------------------------------------------------ [ 333.184331][T16408] syz.0.4231/16408 is trying to acquire lock: [ 333.186800][T16408] ffffffff90480000 (tpg_instances_lock){+.+.}-{4:4}, at: tcm_alloc+0x20/0x440 [ 333.190732][T16408] [ 333.190732][T16408] but task is already holding lock: [ 333.193865][T16408] ffff88805dd7c390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 333.197781][T16408] [ 333.197781][T16408] which lock already depends on the new lock. [ 333.197781][T16408] [ 333.202691][T16408] [ 333.202691][T16408] the existing dependency chain (in reverse order) is: [ 333.206686][T16408] [ 333.206686][T16408] -> #2 (&gi->lock){+.+.}-{4:4}: [ 333.209600][T16408] lock_acquire+0x1d1/0x380 [ 333.211621][T16408] __mutex_lock+0x1a4/0x1bd0 [ 333.213791][T16408] config_usb_cfg_link+0x57/0x3a0 [ 333.215986][T16408] configfs_symlink+0x695/0x1340 [ 333.218164][T16408] vfs_symlink+0x178/0x4d0 [ 333.220133][T16408] filename_symlinkat+0x2a6/0x560 [ 333.222629][T16408] __x64_sys_symlinkat+0x9c/0xe0 [ 333.224847][T16408] do_syscall_64+0x123/0x790 [ 333.226968][T16408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.230475][T16408] [ 333.230475][T16408] -> #1 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 333.234150][T16408] lock_acquire+0x1d1/0x380 [ 333.236233][T16408] down_write+0x8b/0x1f0 [ 333.238131][T16408] configfs_depend_item_unlocked+0xf3/0x6a0 [ 333.241176][T16408] usbg_make_tpg+0x251/0x610 [ 333.243717][T16408] target_fabric_make_tpg+0xab/0x8c0 [ 333.246315][T16408] configfs_mkdir+0x525/0xd40 [ 333.248903][T16408] vfs_mkdir+0x364/0x850 [ 333.250997][T16408] filename_mkdirat+0x48b/0x5e0 [ 333.253143][T16408] __x64_sys_mkdirat+0x89/0xc0 [ 333.255219][T16408] do_syscall_64+0x123/0x790 [ 333.257209][T16408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.260073][T16408] [ 333.260073][T16408] -> #0 (tpg_instances_lock){+.+.}-{4:4}: [ 333.263222][T16408] check_prev_add+0xeb/0xe60 [ 333.265724][T16408] __lock_acquire+0x1528/0x1f40 [ 333.267926][T16408] lock_acquire+0x1d1/0x380 [ 333.270313][T16408] __mutex_lock+0x1a4/0x1bd0 [ 333.272999][T16408] tcm_alloc+0x20/0x440 [ 333.275246][T16408] usb_get_function+0x5e/0xd0 [ 333.277271][T16408] config_usb_cfg_link+0x1ed/0x3a0 [ 333.279461][T16408] configfs_symlink+0x695/0x1340 [ 333.281641][T16408] vfs_symlink+0x178/0x4d0 [ 333.283831][T16408] filename_symlinkat+0x2a6/0x560 [ 333.285915][T16408] __x64_sys_symlinkat+0x9c/0xe0 [ 333.288110][T16408] do_syscall_64+0x123/0x790 [ 333.290020][T16408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.293175][T16408] [ 333.293175][T16408] other info that might help us debug this: [ 333.293175][T16408] [ 333.297359][T16408] Chain exists of: [ 333.297359][T16408] tpg_instances_lock --> &sb->s_type->i_mutex_key#24 --> &gi->lock [ 333.297359][T16408] [ 333.302980][T16408] Possible unsafe locking scenario: [ 333.302980][T16408] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.306623][T16408] CPU0 CPU1 [ 333.309161][T16408] ---- ---- [ 333.311638][T16408] lock(&gi->lock); [ 333.313301][T16408] lock(&sb->s_type->i_mutex_key#24); [ 333.316357][T16408] lock(&gi->lock); [ 333.318862][T16408] lock(tpg_instances_lock); [ 333.320754][T16408] [ 333.320754][T16408] *** DEADLOCK *** [ 333.320754][T16408] [ 333.324214][T16408] locks held by syz.0.4231/16408: 3, last CPU#0: [ 333.327234][T16408] #0: ffff88802352c460 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 333.332621][T16408] #1: ffff88803e0c0f80 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x452/0x1340 [ 333.337005][T16408] #2: ffff88805dd7c390 (&gi->lock){+.+.}-{4:4}, at: config_usb_cfg_link+0x57/0x3a0 [ 333.340594][T16408] [ 333.340594][T16408] stack backtrace: [ 333.343142][T16408] CPU: 0 UID: 0 PID: 16408 Comm: syz.0.4231 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.346751][T16408] Tainted: [L]=SOFTLOCKUP [ 333.348525][T16408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.352999][T16408] Call Trace: [ 333.354379][T16408] [ 333.355642][T16408] dump_stack_lvl+0x100/0x190 [ 333.357630][T16408] print_circular_bug.cold+0x178/0x1be [ 333.359971][T16408] check_noncircular+0x146/0x160 [ 333.362082][T16408] check_prev_add+0xeb/0xe60 [ 333.364235][T16408] __lock_acquire+0x1528/0x1f40 [ 333.366318][T16408] lock_acquire+0x1d1/0x380 [ 333.368120][T16408] ? tcm_alloc+0x20/0x440 [ 333.370504][T16408] ? __pfx___might_resched+0x10/0x10 [ 333.372667][T16408] ? config_usb_cfg_link+0x57/0x3a0 [ 333.374770][T16408] __mutex_lock+0x1a4/0x1bd0 [ 333.376783][T16408] ? tcm_alloc+0x20/0x440 [ 333.378364][T16408] ? tcm_alloc+0x20/0x440 [ 333.379825][T16408] ? __mutex_lock+0x26c/0x1bd0 [ 333.382320][T16408] ? config_usb_cfg_link+0x57/0x3a0 [ 333.384607][T16408] ? __pfx___mutex_lock+0x10/0x10 [ 333.387076][T16408] ? __pfx_selinux_inode_permission+0x10/0x10 [ 333.389722][T16408] ? tcm_alloc+0x20/0x440 [ 333.391281][T16408] tcm_alloc+0x20/0x440 [ 333.392654][T16408] usb_get_function+0x5e/0xd0 [ 333.394581][T16408] config_usb_cfg_link+0x1ed/0x3a0 [ 333.396820][T16408] ? mntput_no_expire+0xe7/0x220 [ 333.398958][T16408] configfs_symlink+0x695/0x1340 [ 333.400691][T16408] ? __pfx_configfs_symlink+0x10/0x10 [ 333.402570][T16408] vfs_symlink+0x178/0x4d0 [ 333.404316][T16408] filename_symlinkat+0x2a6/0x560 [ 333.406288][T16408] ? __pfx_filename_symlinkat+0x10/0x10 [ 333.408397][T16408] ? strncpy_from_user+0x19d/0x2d0 [ 333.410422][T16408] ? do_getname+0x191/0x390 [ 333.412359][T16408] __x64_sys_symlinkat+0x9c/0xe0 [ 333.414553][T16408] do_syscall_64+0x123/0x790 [ 333.416306][T16408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.418326][T16408] RIP: 0033:0x7f3126d9e159 [ 333.420101][T16408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.427389][T16408] RSP: 002b:00007f3127c7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 333.430941][T16408] RAX: ffffffffffffffda RBX: 00007f3127025fa0 RCX: 00007f3126d9e159 [ 333.434333][T16408] RDX: 0000200000000640 RSI: ffffffffffffff9c RDI: 0000200000000600 [ 333.437462][T16408] RBP: 00007f3126e3506b R08: 0000000000000000 R09: 0000000000000000 [ 333.440592][T16408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.444348][T16408] R13: 00007f3127026038 R14: 00007f3127025fa0 R15: 00007ffe5227fab8 [ 333.448249][T16408] [ 333.487681][T16413] udc dummy_udc.0: failed to start g1: -19 [ 333.489217][T16413] UDC core: g1: couldn't find an available UDC or it's busy [ 334.239029][ T5779] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.423578][ T5779] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.474577][ T5779] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.503355][ T5779] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.566686][ T5779] bridge_slave_1: left allmulticast mode [ 334.566711][ T5779] bridge_slave_1: left promiscuous mode [ 334.566836][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.578481][ T5779] bridge_slave_0: left allmulticast mode [ 334.578535][ T5779] bridge_slave_0: left promiscuous mode [ 334.578675][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.608333][ T5779] dvmrp6: left allmulticast mode [ 334.681480][ T5779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.684474][ T5779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.685665][ T5779] bond0 (unregistering): Released all slaves [ 334.700291][T10830] bridge0: port 3(syz_tun) entered disabled state [ 334.701911][T10830] syz_tun (unregistering): left allmulticast mode [ 334.701931][T10830] syz_tun (unregistering): left promiscuous mode [ 334.701993][T10830] bridge0: port 3(syz_tun) entered disabled state [ 334.774319][ T43] audit: type=1400 audit(1790152042.040:621): avc: denied { write } for pid=16418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.806748][ T43] audit: type=1400 audit(1790152042.070:622): avc: denied { write } for pid=16421 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.837277][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 334.879916][ T5779] hsr_slave_0: left promiscuous mode [ 334.880416][ T5779] hsr_slave_1: left promiscuous mode [ 334.880931][ T5779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.880950][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.881997][ T5779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.882014][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.890558][ T5779] veth1_macvtap: left promiscuous mode [ 334.890599][ T5779] veth0_macvtap: left promiscuous mode [ 334.890692][ T5779] veth1_vlan: left promiscuous mode [ 334.890736][ T5779] v: left promiscuous mode [ 334.896256][ T43] audit: type=1400 audit(1790152042.160:623): avc: denied { write } for pid=16424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.936762][ T43] audit: type=1400 audit(1790152042.200:624): avc: denied { write } for pid=16427 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.937804][ T1042] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51) [ 334.976506][ T5779] team0 (unregistering): Port device team_slave_1 removed [ 334.980815][ T5779] team0 (unregistering): Port device team_slave_0 removed [ 335.029115][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 335.091528][ T43] audit: type=1400 audit(1790152042.360:625): avc: denied { write } for pid=16430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.145024][ T43] audit: type=1400 audit(1790152042.410:626): avc: denied { write } for pid=16433 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.184910][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 335.245137][ T5779] IPVS: stop unused estimator thread 0... [ 335.351082][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 335.402051][ T5779] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.461864][ T5779] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.514397][ T5779] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.561787][ T5779] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.629489][ T5779] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.682632][ T5779] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.732377][ T5779] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.757126][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 335.792880][ T5779] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.883854][ T5779] bridge_slave_1: left allmulticast mode [ 335.883879][ T5779] bridge_slave_1: left promiscuous mode [ 335.884005][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.885734][ T5779] bridge_slave_0: left allmulticast mode [ 335.885754][ T5779] bridge_slave_0: left promiscuous mode [ 335.885868][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.890219][ T5779] dvmrp6: left allmulticast mode [ 335.901285][ T5779] bridge_slave_1: left allmulticast mode [ 335.901314][ T5779] bridge_slave_1: left promiscuous mode [ 335.901447][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.906353][ T5779] bridge_slave_0: left allmulticast mode [ 335.906383][ T5779] bridge_slave_0: left promiscuous mode [ 335.906583][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.913944][ T5779] dvmrp6: left allmulticast mode [ 335.916103][ T5779] batman_adv: batadv0: Interface deactivated: gretap1 [ 336.005219][ T5779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.006858][ T5779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.015376][ T5779] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 336.016404][ T5779] bond0 (unregistering): Released all slaves [ 336.041655][ T5779] batman_adv: batadv0: Removing interface: gretap1 [ 336.057904][ T5779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.059630][ T5779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.060664][ T5779] bond0 (unregistering): Released all slaves [ 336.062217][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7 [ 336.094541][ T5779] tipc: Left network mode [ 336.174150][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 336.352866][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 336.413446][ T5779] hsr_slave_0: left promiscuous mode [ 336.413905][ T5779] hsr_slave_1: left promiscuous mode [ 336.414301][ T5779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.414316][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.414883][ T5779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.414925][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.422843][ T5779] hsr_slave_0: left promiscuous mode [ 336.426201][ T5779] hsr_slave_1: left promiscuous mode [ 336.426823][ T5779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.426843][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.430243][ T5779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.430262][ T5779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.447346][ T5779] veth1_macvtap: left promiscuous mode [ 336.447379][ T5779] veth0_macvtap: left promiscuous mode [ 336.460129][ T5779] veth1_macvtap: left promiscuous mode [ 336.460158][ T5779] veth0_macvtap: left promiscuous mode [ 336.460209][ T5779] veth1_vlan: left promiscuous mode [ 336.460289][ T5779] veth0_vlan: left promiscuous mode [ 336.578802][ T5779] team0 (unregistering): Port device team_slave_1 removed [ 336.582964][ T5779] team0 (unregistering): Port device team_slave_0 removed [ 336.688416][ T5779] team0 (unregistering): Port device team_slave_1 removed [ 336.692114][ T5779] team0 (unregistering): Port device team_slave_0 removed [ 336.748433][ T5442] 8021q: adding VLAN 0 to HW filter on device eth10 [ 336.899903][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11 [ 337.030123][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12 [ 337.065460][ T5779] IPVS: stop unused estimator thread 0... [ 337.148511][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13 [ 341.037306][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 341.037318][ T43] audit: type=1400 audit(1790152048.310:645): avc: denied { recv } for pid=0 comm="swapper/2" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 341.067673][ T43] audit: type=1400 audit(1790152048.340:646): avc: denied { write } for pid=16516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 341.114106][ T43] audit: type=1400 audit(1790152048.380:647): avc: denied { write } for pid=16519 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1