last executing test programs: 6.166051986s ago: executing program 2 (id=3): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) pipe(&(0x7f0000000500)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:1d.7/remove\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='1', 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="9ca14e39222e6f25c47c4d659a7dc58933e30cbe59d5426a5bc091123ae58716e60799e92525641202d738821fa59441381ed2e01e5df9a20275bceca3aea0dde94fb404b6cf71b98386195ebf22542d462d6e460cb99f5fd616de8f2e119a618292f289220d73db849828bc55bc9c7aa45ce82a15a87301f25aa7fe8c13b8caa336a8a6e7cec8b7e6892f1d84953cbffbf2a239b27231e91294fc10", 0x9c) 5.530356125s ago: executing program 0 (id=19): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r0, 0x5c2a7000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x8502, &(0x7f0000000080)={@_ha_fsid={[0xffff, 0x200]}, {0x4, 0x101, 0x5, 0x9}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0xfe0b}) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r2, 0xac9d4000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 5.286316128s ago: executing program 0 (id=22): mkdir(&(0x7f0000000080)='./my_configfs\x00', 0x1be) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x80840) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_io_uring_setup(0x3392, &(0x7f0000000140)={0x0, 0x7826, 0x200, 0x2, 0xf3}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000000280)={0x8, 0x0, '\x00', @zc_export={r0}}, 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r7, 0xc0845658, &(0x7f0000000300)={0x0, @bt={0xa, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x8b, 0x60c86b0b, 0x1, 0x2d92d032, 0x9, 0x3aff, 0x4, 0x2, 0x7, {0x86, 0x40}, 0x68, 0xbc}}) r8 = socket(0x10, 0x2, 0xf) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x8821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r3, &(0x7f0000000500)="39c394f705916c4516999da20800", 0xe, 0x40810, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r10, &(0x7f0000001400)='1', 0x1) 5.206584826s ago: executing program 2 (id=23): mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x80000, 0x104) (fail_nth: 4) 5.179639433s ago: executing program 2 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000d00)='0', 0x1) 5.079952597s ago: executing program 2 (id=26): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_off}, {@index_off}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) io_uring_setup(0x61bd, &(0x7f0000000140)={0x0, 0x3bf8, 0x3681, 0xfffffffd, 0x40273}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x0, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x80000, 0x104) 4.9202873s ago: executing program 2 (id=32): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='tcpch 0x50\n\x00', 0xb) write(r0, &(0x7f0000000500)='tcpci 0x50\n\x00', 0xb) 4.539489423s ago: executing program 0 (id=39): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="e13f0000090209000101008001120100020000004000000000000000000002", 0x1f) 4.480244912s ago: executing program 0 (id=41): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000001240)=0x4) (async) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0800080004030200b6e71400020046200fc000680000030690780a0100fde0000001940400004e204e28", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) (async) r4 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3b5a8000) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 32) r5 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0) (rerun: 32) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(r5) (async) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 4.360318253s ago: executing program 0 (id=43): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) (fail_nth: 2) 3.678645106s ago: executing program 1 (id=52): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f0000000080), 0x80000000, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000004, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x200}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = fcntl$getown(r1, 0x9) syz_pidfd_open(r2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.200293901s ago: executing program 1 (id=53): syz_emit_ethernet(0x14, &(0x7f0000000280)={@local, @remote, @val={@void}, {@generic={0x88a2, 'f\n'}}}, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "b33df4202d91b83551f8e254d7223113"}, 0x11, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101602, 0x0) write$tun(r0, &(0x7f0000002300)={@val={0x0, 0x9000}, @void, @ipv6=@icmpv6={0x5, 0x6, "cc0ff4", 0x8, 0x3a, 0x1, @mcast1, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xdb, 0xb}}}}, 0x34) openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x0, 0x20) 3.200055612s ago: executing program 1 (id=54): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x4000, 0x40, 0x8}, 0x18) openat(r1, &(0x7f0000000100)='./file0\x00', 0x101802, 0x50) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r2, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.928214407s ago: executing program 1 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = open(&(0x7f0000000140)='none\x00', 0x660102, 0x8) recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000240), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000440)=""/42, 0x2a}], 0x2}, 0x40) write(r0, &(0x7f0000000100)='chipidea-usb2\x00', 0xd) pipe(&(0x7f00000000c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/chipidea-usb2/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='pcspkr\x00', 0x6) 2.927713064s ago: executing program 1 (id=57): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x7, 0x0, 0x4, 0x5d11, 0x9, 0x0, 0xe], [0x5c0, 0x80000000, 0x0, 0x0, 0x3a3, 0x0, 0x0, 0x4], [0x7, 0x0, 0x0, 0xfffffffc, 0xc6df, 0x0, 0x4]], '\x00', [{}, {0x3, 0x8}, {0x1}, {0x0, 0x80000000}, {0x3, 0x4, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {0xfffffffc}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0x7}, {0x7fffffe, 0x3}], '\x00', 0x1000}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) 2.800364063s ago: executing program 2 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001a0)='./config/usb_gadget/g1/functions/uac2.usb0/c_hs_bint\x00', 0x0, 0x0) (fail_nth: 4) 2.740990426s ago: executing program 32 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001a0)='./config/usb_gadget/g1/functions/uac2.usb0/c_hs_bint\x00', 0x0, 0x0) (fail_nth: 4) 2.700647801s ago: executing program 0 (id=59): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) 2.061738094s ago: executing program 1 (id=60): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.228395249s ago: executing program 3 (id=62): mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{0x5, 0x1, 0x0, 0x8, 'syz1\x00', 0x200}, 0x0, 0x20, 0x9, 0x0, 0x0, 0xf2, 'syz0\x00', 0x0}) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYRES64, @ANYRES32=r1, @ANYRES64=r1, @ANYBLOB="24992509ee7bed5c679a109c468a6a475ec0aa49267d3f4aa3e086c3fbc85370a6bc51c626d8725c823d6192c262d26b684cfddd406c5f5141031f164a1da635106021b36a1b3fdad46a013f8ed45ac5127ae88ad113dbde27136b78e500c33ccddfda24a5889bf9b36fa67477fddd498cb08b8883d0120f7fb21544dac7acf6834fdfea9c80a1bce8dc06bba73c82fcd2ac29503e030ef2c0342bb950b7e61eda4ab18ec802d604ae4d8999489150f855f100"/191], 0xd) rename(&(0x7f00000001c0)='myproc/iomem\x00', &(0x7f0000000240)='myproc/iomem\x00') 1.164086647s ago: executing program 3 (id=63): syz_clone(0x80000, &(0x7f0000000000)="2f1e1aeb37b8a95232cc9abe9816859d98db02e2f6694a7b546eadd4d232d1dd45ce7a781a45002d38cbc96003760fbf9a231b7a3a12d2083e79cb15ef59240391c2e35c85a0243f33133b5818c11d38d5e238b480", 0x55, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)="963c23f8106a758918cf0cb8c2f71ab98334e69ac85628dde7b23ae4524fa53c9a5fcb5d46e3ddd216b094531c3015668c861a8e3d1c29778d26c8822d35e345aca59049338b939d356d4c2b86d2ddad0b10d98637d978da740b2c802cf008f3b1097728d29a895e0215f4e2aab8b435551504ed5b36df56a00aa1582ed9ecba78ab294af1e56ca603f11d2588f85d01cda1896762ac6a9e6c9bd79ff4235658adfc21") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)="05", 0x1) 1.019592982s ago: executing program 3 (id=64): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911a812ff00000c03000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20040000000a01010000000000000000021700000909000000797a300000000048000000030a01010000070000000000020000000900010073797a30000000002a00030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a0500000000000000000000000008140000001100010000000000000000000000000a47"], 0xa4}}, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)=r1) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) 900.183062ms ago: executing program 3 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.0/streaming/color_matching/my_color2/bColorPrimaries\x00', 0x2, 0x500) 810.576572ms ago: executing program 3 (id=67): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@empty, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "736790", 0x8, 0x3a, 0x0, @local, @mcast1, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x100}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001400), r2) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000280)={0x0, 0x2, 0x6ef796b8, 0x1}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000680)={0x0, 0x80000001, 0x9fc4, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000a80)={0x9, 0x3, {0x4, @usage=0x200, 0x0, 0x8, 0x10, 0xfffffffffffffffd, 0x96c0000000000000, 0x0, 0x462, @struct={0x0, 0x8}, 0x0, 0x80000001, [0x7, 0x57, 0x3, 0x1, 0xfb8, 0x8000000000000001]}, {0xaa, @usage=0xf4, r4, 0x2, 0x8000000000000001, 0x8, 0x7, 0x0, 0xa0, @usage=0x1, 0x1, 0x8000, [0x7, 0x6, 0x400, 0x6, 0x5, 0xffffffffffffffff]}, {0x4, @usage=0x1, r5, 0x8000000000000000, 0x2, 0x3, 0x5, 0x1, 0x2, @usage=0x39, 0x0, 0x401, [0x3, 0x9, 0x1, 0x10, 0x6, 0x7fffffffffffffff]}, {0x401, 0x9, 0x4}}) 680.526617ms ago: executing program 3 (id=68): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080fa0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='stm32g0-typec 0x3', 0x11) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001600)={0x84, &(0x7f0000001700)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 141.067876ms ago: executing program 4 (id=66): mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x7ffe, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0c00031000ad6ef41e"], 0xf) 631.689µs ago: executing program 4 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000580)=[{&(0x7f0000000100)="850a2c79d9f33dd68b5eb6aab893fbe3e1335f9df988dd8230dfe3911ef1e808fdd996866603a46ee4321618c3cb2dc8ac601822d7c7932b83de24e6097bbeeaf3b9ad6e", 0x44}, {&(0x7f00000002c0)="f442e77bc8e1053944c0dfc7484f6425e94e78efbe291585f363a3412622e94fb80b32d75253c6bbf57b22e45f8406e41bccad77ad090f50dc196e", 0x3b}], 0x2, 0x7, 0x395, 0x30) 0s ago: executing program 4 (id=70): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, &(0x7f0000000080), 0x80000000, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000004, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 37.809393][ T42] audit: type=1400 audit(1784930552.228:115): avc: denied { siginh } for pid=5636 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:56628' (ED25519) to the list of known hosts. [ 39.856008][ T42] audit: type=1400 audit(1784930554.308:116): avc: denied { name_bind } for pid=5645 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.510933][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 41.510947][ T42] audit: type=1400 audit(1784930555.958:119): avc: denied { write } for pid=5649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.548162][ T42] audit: type=1400 audit(1784930555.998:120): avc: denied { write } for pid=5652 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.694547][ T42] audit: type=1400 audit(1784930556.138:121): avc: denied { write } for pid=5655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.730087][ T42] audit: type=1400 audit(1784930556.178:122): avc: denied { write } for pid=5658 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.799801][ T42] audit: type=1400 audit(1784930556.248:123): avc: denied { write } for pid=5661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.836192][ T42] audit: type=1400 audit(1784930556.288:124): avc: denied { write } for pid=5664 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.900005][ T42] audit: type=1400 audit(1784930556.348:125): avc: denied { write } for pid=5667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.944221][ T42] audit: type=1400 audit(1784930556.388:126): avc: denied { write } for pid=5670 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.325113][ T42] audit: type=1400 audit(1784930556.778:127): avc: denied { write } for pid=5673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.377089][ T42] audit: type=1400 audit(1784930556.828:128): avc: denied { write } for pid=5676 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.683801][ T5646] cgroup: Unknown subsys name 'net' [ 42.818525][ T5646] cgroup: Unknown subsys name 'cpuset' [ 42.824406][ T5646] cgroup: Unknown subsys name 'rlimit' [ 43.074807][ T5704] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.875174][ T5646] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.733798][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 47.733813][ T42] audit: type=1400 audit(1784930562.178:162): avc: denied { execmem } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.897706][ T42] audit: type=1400 audit(1784930562.348:163): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.905400][ T42] audit: type=1400 audit(1784930562.348:164): avc: denied { create } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.911572][ T42] audit: type=1400 audit(1784930562.348:165): avc: denied { read write } for pid=5732 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.920666][ T42] audit: type=1400 audit(1784930562.348:166): avc: denied { read write } for pid=5733 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.927882][ T42] audit: type=1400 audit(1784930562.348:167): avc: denied { open } for pid=5732 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.935084][ T42] audit: type=1400 audit(1784930562.348:168): avc: denied { ioctl } for pid=5732 comm="syz-executor" path="socket:[6557]" dev="sockfs" ino=6557 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.945971][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.948431][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.952618][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.953884][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.955195][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.955654][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.956518][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.956880][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.957297][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.957314][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.958149][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.958370][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.958917][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.959650][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.961094][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.961807][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.962534][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.962860][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.968187][ T42] audit: type=1400 audit(1784930562.418:169): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.973967][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.974445][ T42] audit: type=1400 audit(1784930562.418:170): avc: denied { open } for pid=5733 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.983200][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.985211][ T42] audit: type=1400 audit(1784930562.428:171): avc: denied { mounton } for pid=5733 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.543121][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.546038][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.548268][ T5733] bridge_slave_0: entered allmulticast mode [ 48.550995][ T5733] bridge_slave_0: entered promiscuous mode [ 48.571681][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.574765][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.577797][ T5733] bridge_slave_1: entered allmulticast mode [ 48.581659][ T5733] bridge_slave_1: entered promiscuous mode [ 48.667250][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.692419][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.694828][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.697130][ T5732] bridge_slave_0: entered allmulticast mode [ 48.699772][ T5732] bridge_slave_0: entered promiscuous mode [ 48.705107][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.723174][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.725529][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.727854][ T5732] bridge_slave_1: entered allmulticast mode [ 48.730500][ T5732] bridge_slave_1: entered promiscuous mode [ 48.777531][ T5733] team0: Port device team_slave_0 added [ 48.787339][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.790425][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.793699][ T5735] bridge_slave_0: entered allmulticast mode [ 48.797274][ T5735] bridge_slave_0: entered promiscuous mode [ 48.803619][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.807639][ T5733] team0: Port device team_slave_1 added [ 48.815658][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.818318][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.820775][ T5735] bridge_slave_1: entered allmulticast mode [ 48.823485][ T5735] bridge_slave_1: entered promiscuous mode [ 48.828394][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.840043][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.842812][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.845338][ T5734] bridge_slave_0: entered allmulticast mode [ 48.848230][ T5734] bridge_slave_0: entered promiscuous mode [ 48.881195][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.883507][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.885932][ T5734] bridge_slave_1: entered allmulticast mode [ 48.888517][ T5734] bridge_slave_1: entered promiscuous mode [ 48.899538][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.904073][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.907736][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.910575][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.919241][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.924270][ T5732] team0: Port device team_slave_0 added [ 48.940228][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.942552][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.950552][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.956160][ T5732] team0: Port device team_slave_1 added [ 48.959758][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.970685][ T5735] team0: Port device team_slave_0 added [ 48.989099][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.993867][ T5735] team0: Port device team_slave_1 added [ 49.017225][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.019921][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.029930][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.041459][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.043636][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.051869][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.060386][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.062878][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.072704][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.085026][ T5734] team0: Port device team_slave_0 added [ 49.108234][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.110422][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.118315][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.123125][ T5734] team0: Port device team_slave_1 added [ 49.142681][ T5733] hsr_slave_0: entered promiscuous mode [ 49.146110][ T5733] hsr_slave_1: entered promiscuous mode [ 49.166907][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.169078][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.177702][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.182090][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.184296][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.193392][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.255329][ T5735] hsr_slave_0: entered promiscuous mode [ 49.258128][ T5735] hsr_slave_1: entered promiscuous mode [ 49.260275][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 49.262172][ T5735] Cannot create hsr debugfs directory [ 49.291066][ T5732] hsr_slave_0: entered promiscuous mode [ 49.294263][ T5732] hsr_slave_1: entered promiscuous mode [ 49.297266][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 49.299724][ T5732] Cannot create hsr debugfs directory [ 49.311233][ T5734] hsr_slave_0: entered promiscuous mode [ 49.313466][ T5734] hsr_slave_1: entered promiscuous mode [ 49.315596][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 49.317385][ T5734] Cannot create hsr debugfs directory [ 49.641020][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.650217][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.652937][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.659458][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.663421][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.670154][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.673905][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.679900][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.736835][ T5732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.742099][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.744954][ T5732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.748846][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.751807][ T5732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.755930][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.759873][ T5732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.766501][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.809090][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.815783][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.818629][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.822316][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.826689][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.830688][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.837155][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.843175][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.936511][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.945633][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.951521][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.963948][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.969302][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.972622][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.978610][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.982796][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.986611][ T5739] Bluetooth: hci1: command tx timeout [ 49.986618][ T5738] Bluetooth: hci0: command tx timeout [ 49.989332][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.015076][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.021502][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.043279][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.046360][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.054892][ T5739] Bluetooth: hci2: command tx timeout [ 50.055159][ T5738] Bluetooth: hci3: command tx timeout [ 50.058654][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.063703][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.066861][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.084365][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.087469][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.093213][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.096071][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.142228][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.177433][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.189552][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.191874][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.205573][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.208663][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.243920][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.277941][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.289628][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.292641][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.301509][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.304229][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.506031][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.519182][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.559462][ T5733] veth0_vlan: entered promiscuous mode [ 50.568845][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.580087][ T5733] veth1_vlan: entered promiscuous mode [ 50.600774][ T5732] veth0_vlan: entered promiscuous mode [ 50.614526][ T5732] veth1_vlan: entered promiscuous mode [ 50.621672][ T5733] veth0_macvtap: entered promiscuous mode [ 50.629857][ T5733] veth1_macvtap: entered promiscuous mode [ 50.648007][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.653889][ T5734] veth0_vlan: entered promiscuous mode [ 50.668185][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.673903][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.679386][ T5734] veth1_vlan: entered promiscuous mode [ 50.688749][ T5732] veth0_macvtap: entered promiscuous mode [ 50.700988][ T5732] veth1_macvtap: entered promiscuous mode [ 50.709160][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.712277][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.725870][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.729177][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.748089][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.764040][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.778213][ T5735] veth0_vlan: entered promiscuous mode [ 50.788902][ T5734] veth0_macvtap: entered promiscuous mode [ 50.804283][ T5734] veth1_macvtap: entered promiscuous mode [ 50.807711][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.811462][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.818974][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.822560][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.822789][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.825662][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.832899][ T5735] veth1_vlan: entered promiscuous mode [ 50.875300][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.878847][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.879634][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.887683][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.909083][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.925091][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.935120][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.941608][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.942055][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.948389][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.953614][ T5733] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.955777][ T5735] veth0_macvtap: entered promiscuous mode [ 50.993777][ T5735] veth1_macvtap: entered promiscuous mode [ 51.000122][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.002913][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.028498][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.034221][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.059391][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.063837][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.067414][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.069842][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.073019][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.100837][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.123901][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.132750][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.176847][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.180003][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.203482][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 51.205835][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.208496][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.331884][ T5897] Bluetooth: MGMT ver 1.23 [ 51.340168][ T5903] Bluetooth: MGMT ver 1.23 [ 51.422165][ T5899] uhci_hcd 0000:00:1d.0: remove, state 4 [ 51.424318][ T5899] usb usb2: USB disconnect, device number 1 [ 51.436593][ T5899] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 51.513259][ T5909] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 51.527221][ T5909] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 51.547383][ T5909] pci 0000:00:1d.0: Adding to iommu group 7 [ 51.559129][ T5909] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 51.623655][ T5926] FAULT_INJECTION: forcing a failure. [ 51.623655][ T5926] name failslab, interval 1, probability 0, space 0, times 1 [ 51.629830][ T5926] CPU: 3 UID: 0 PID: 5926 Comm: syz.0.11 Not tainted syzkaller #0 PREEMPT(full) [ 51.629853][ T5926] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.629864][ T5926] Call Trace: [ 51.629871][ T5926] [ 51.629878][ T5926] dump_stack_lvl+0x100/0x190 [ 51.629904][ T5926] should_fail_ex.cold+0x5/0xa [ 51.629926][ T5926] should_failslab+0xc2/0x120 [ 51.629952][ T5926] kmem_cache_alloc_noprof+0x91/0x6a0 [ 51.629976][ T5926] ? dst_alloc+0x99/0x1a0 [ 51.629999][ T5926] dst_alloc+0x99/0x1a0 [ 51.630020][ T5926] rt_dst_alloc+0x35/0x3a0 [ 51.630040][ T5926] ip_route_input_slow+0x15b8/0x3fa0 [ 51.630067][ T5926] ? __pfx_ip_route_input_slow+0x10/0x10 [ 51.630114][ T5926] ip_route_input_noref+0x122/0x2e0 [ 51.630147][ T5926] ? __pfx_ip_route_input_noref+0x10/0x10 [ 51.630176][ T5926] ? __pfx_ip_rcv_finish+0x10/0x10 [ 51.630206][ T5926] ip_rcv_finish_core+0x459/0x2c30 [ 51.630243][ T5926] ip_rcv+0x1c0/0x3c0 [ 51.630269][ T5926] ? __pfx_ip_rcv+0x10/0x10 [ 51.630293][ T5926] __netif_receive_skb_one_core+0x197/0x1e0 [ 51.630315][ T5926] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 51.630336][ T5926] ? lock_acquire+0x1b9/0x370 [ 51.630365][ T5926] __netif_receive_skb+0x1f/0x120 [ 51.630392][ T5926] netif_receive_skb+0x139/0x7d0 [ 51.630410][ T5926] ? __pfx_netif_receive_skb+0x10/0x10 [ 51.630437][ T5926] tun_rx_batched.isra.0+0x3f6/0x750 [ 51.630492][ T5926] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 51.630527][ T5926] ? tun_get_user+0x1cc8/0x3c20 [ 51.630550][ T5926] tun_get_user+0x1e31/0x3c20 [ 51.630579][ T5926] ? __pfx_tun_get_user+0x10/0x10 [ 51.630598][ T5926] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 51.630632][ T5926] ? find_held_lock+0x2b/0x80 [ 51.630660][ T5926] ? tun_get+0x191/0x370 [ 51.630686][ T5926] ? tun_get+0x191/0x370 [ 51.630718][ T5926] tun_chr_write_iter+0xdc/0x200 [ 51.630738][ T5926] vfs_write+0x6ac/0x1050 [ 51.630767][ T5926] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 51.630788][ T5926] ? __pfx_vfs_write+0x10/0x10 [ 51.630814][ T5926] ? find_held_lock+0x2b/0x80 [ 51.630857][ T5926] ksys_write+0x12a/0x250 [ 51.630883][ T5926] ? __pfx_ksys_write+0x10/0x10 [ 51.630917][ T5926] do_syscall_64+0x115/0x870 [ 51.630936][ T5926] ? clear_bhb_loop+0x40/0x90 [ 51.630958][ T5926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.630977][ T5926] RIP: 0033:0x7f473bb5e6ce [ 51.630994][ T5926] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 51.631011][ T5926] RSP: 002b:00007f473ca51fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.631031][ T5926] RAX: ffffffffffffffda RBX: 00007f473ca526c0 RCX: 00007f473bb5e6ce [ 51.631043][ T5926] RDX: 0000000000000036 RSI: 0000200000000140 RDI: 00000000000000c8 [ 51.631053][ T5926] RBP: 00007f473ca52090 R08: 0000000000000000 R09: 0000000000000000 [ 51.631063][ T5926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.631074][ T5926] R13: 00007f473be26038 R14: 00007f473be25fa0 R15: 00007ffe350a7658 [ 51.631098][ T5926] [ 51.647697][ T5909] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 81665 usecs [ 51.671615][ T5930] FAULT_INJECTION: forcing a failure. [ 51.671615][ T5930] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.708667][ T5909] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 51.710136][ T5930] CPU: 1 UID: 0 PID: 5930 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) [ 51.710157][ T5930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.710165][ T5930] Call Trace: [ 51.710173][ T5930] [ 51.710180][ T5930] dump_stack_lvl+0x100/0x190 [ 51.710206][ T5930] should_fail_ex.cold+0x5/0xa [ 51.710230][ T5930] _copy_from_iter+0x1f4/0x1690 [ 51.710259][ T5930] ? __asan_memset+0x23/0x50 [ 51.710279][ T5930] ? __pfx__copy_from_iter+0x10/0x10 [ 51.710300][ T5930] ? __pfx___alloc_skb+0x10/0x10 [ 51.710329][ T5930] netlink_sendmsg+0x808/0xda0 [ 51.710350][ T5930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.710371][ T5930] ? selinux_socket_sendmsg+0x198/0x2f0 [ 51.710401][ T5930] ____sys_sendmsg+0xa4d/0xbe0 [ 51.710426][ T5930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.710444][ T5930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 51.710501][ T5930] ___sys_sendmsg+0x190/0x1e0 [ 51.710530][ T5930] ? __pfx____sys_sendmsg+0x10/0x10 [ 51.710555][ T5930] ? __lock_acquire+0x49f/0x1a40 [ 51.710575][ T5930] ? get_pid_task+0x106/0x250 [ 51.710628][ T5930] __sys_sendmsg+0x160/0x210 [ 51.710647][ T5930] ? __pfx___sys_sendmsg+0x10/0x10 [ 51.710678][ T5930] do_syscall_64+0x115/0x870 [ 51.710695][ T5930] ? clear_bhb_loop+0x40/0x90 [ 51.710716][ T5930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.710733][ T5930] RIP: 0033:0x7f5af6f9de99 [ 51.710749][ T5930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.710763][ T5930] RSP: 002b:00007f5af51f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.710781][ T5930] RAX: ffffffffffffffda RBX: 00007f5af7225fa0 RCX: 00007f5af6f9de99 [ 51.710792][ T5930] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 51.710801][ T5930] RBP: 00007f5af51f6090 R08: 0000000000000000 R09: 0000000000000000 [ 51.710818][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.710827][ T5930] R13: 00007f5af7226038 R14: 00007f5af7225fa0 R15: 00007ffed8dc4d18 [ 51.710849][ T5930] [ 51.751982][ T5936] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 51.765571][ T5909] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 51.829599][ T5909] uhci_hcd 0000:00:1d.0: detected 2 ports [ 51.836821][ T5909] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 51.838167][ T5941] FAULT_INJECTION: forcing a failure. [ 51.838167][ T5941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.842315][ T5909] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 51.844355][ T5941] CPU: 3 UID: 0 PID: 5941 Comm: syz.3.18 Not tainted syzkaller #0 PREEMPT(full) [ 51.844378][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.844388][ T5941] Call Trace: [ 51.844392][ T5941] [ 51.844398][ T5941] dump_stack_lvl+0x100/0x190 [ 51.844417][ T5941] should_fail_ex.cold+0x5/0xa [ 51.844437][ T5941] strncpy_from_user+0x3b/0x2d0 [ 51.844452][ T5941] do_getname+0x78/0x390 [ 51.844468][ T5941] __x64_sys_symlinkat+0x8b/0xe0 [ 51.844481][ T5941] do_syscall_64+0x115/0x870 [ 51.844493][ T5941] ? clear_bhb_loop+0x40/0x90 [ 51.844506][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.844517][ T5941] RIP: 0033:0x7f89a279de99 [ 51.844527][ T5941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.844537][ T5941] RSP: 002b:00007f89a3714028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 51.844548][ T5941] RAX: ffffffffffffffda RBX: 00007f89a2a25fa0 RCX: 00007f89a279de99 [ 51.844574][ T5941] RDX: 00002000000008c0 RSI: ffffffffffffff9c RDI: 0000200000000880 [ 51.844580][ T5941] RBP: 00007f89a3714090 R08: 0000000000000000 R09: 0000000000000000 [ 51.844586][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.844592][ T5941] R13: 00007f89a2a26038 R14: 00007f89a2a25fa0 R15: 00007ffd287625a8 [ 51.844605][ T5941] [ 51.847484][ T5941] Config c/1 of g1 needs at least one function. [ 51.847629][ T5941] udc dummy_udc.0: failed to start g1: -22 [ 51.847645][ T5941] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 51.848816][ T5941] UDC core: g1: couldn't find an available UDC or it's busy [ 51.852253][ T5909] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 51.917812][ T5909] usb usb2: Product: UHCI Host Controller [ 51.920210][ T5909] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 51.922806][ T5909] usb usb2: SerialNumber: 0000:00:1d.0 [ 51.948224][ T5909] hub 2-0:1.0: USB hub found [ 51.952168][ T5909] hub 2-0:1.0: 2 ports detected [ 52.066301][ T5738] Bluetooth: hci1: command tx timeout [ 52.067990][ T5739] Bluetooth: hci0: command tx timeout [ 52.130934][ T5955] FAULT_INJECTION: forcing a failure. [ 52.130934][ T5955] name failslab, interval 1, probability 0, space 0, times 0 [ 52.134651][ T5739] Bluetooth: hci2: command tx timeout [ 52.135164][ T5738] Bluetooth: hci3: command tx timeout [ 52.138047][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.2.23 Not tainted syzkaller #0 PREEMPT(full) [ 52.138061][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.138067][ T5955] Call Trace: [ 52.138073][ T5955] [ 52.138079][ T5955] dump_stack_lvl+0x100/0x190 [ 52.138102][ T5955] should_fail_ex.cold+0x5/0xa [ 52.138125][ T5955] should_failslab+0xc2/0x120 [ 52.138145][ T5955] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.138166][ T5955] ? trace_kmem_cache_alloc+0xdd/0x100 [ 52.138186][ T5955] ? security_file_alloc+0x34/0x2c0 [ 52.138215][ T5955] security_file_alloc+0x34/0x2c0 [ 52.138240][ T5955] init_file+0x95/0x480 [ 52.138261][ T5955] alloc_empty_file+0x79/0x1c0 [ 52.138284][ T5955] path_openat+0xe7/0x4280 [ 52.138300][ T5955] ? __kasan_slab_alloc+0x89/0x90 [ 52.138320][ T5955] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 52.138338][ T5955] ? do_getname+0x35/0x390 [ 52.138357][ T5955] ? do_sys_openat2+0xc7/0x1e0 [ 52.138375][ T5955] ? __x64_sys_openat+0x12d/0x210 [ 52.138394][ T5955] ? do_syscall_64+0x115/0x870 [ 52.138410][ T5955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.138434][ T5955] ? __pfx_path_openat+0x10/0x10 [ 52.138479][ T5955] do_file_open+0x20e/0x430 [ 52.138500][ T5955] ? __pfx_do_file_open+0x10/0x10 [ 52.138533][ T5955] ? alloc_fd+0x471/0x7a0 [ 52.138553][ T5955] ? do_getname+0x191/0x390 [ 52.138575][ T5955] do_sys_openat2+0x10f/0x1e0 [ 52.138596][ T5955] ? __pfx_do_sys_openat2+0x10/0x10 [ 52.138616][ T5955] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 52.138635][ T5955] ? __fget_files+0x21f/0x3d0 [ 52.138655][ T5955] __x64_sys_openat+0x12d/0x210 [ 52.138676][ T5955] ? __pfx___x64_sys_openat+0x10/0x10 [ 52.138695][ T5955] ? ksys_write+0x1ac/0x250 [ 52.138727][ T5955] do_syscall_64+0x115/0x870 [ 52.138742][ T5955] ? clear_bhb_loop+0x40/0x90 [ 52.138762][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.138778][ T5955] RIP: 0033:0x7f9e72b9de99 [ 52.138793][ T5955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.138807][ T5955] RSP: 002b:00007f9e73aae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.138833][ T5955] RAX: ffffffffffffffda RBX: 00007f9e72e25fa0 RCX: 00007f9e72b9de99 [ 52.138843][ T5955] RDX: 0000000000080000 RSI: 0000200000000f00 RDI: ffffffffffffff9c [ 52.138853][ T5955] RBP: 00007f9e73aae090 R08: 0000000000000000 R09: 0000000000000000 [ 52.138862][ T5955] R10: 0000000000000104 R11: 0000000000000246 R12: 0000000000000001 [ 52.138872][ T5955] R13: 00007f9e72e26038 R14: 00007f9e72e25fa0 R15: 00007ffcdd17f6c8 [ 52.138893][ T5955] [ 52.198606][ T5957] 9p: Bad value for 'rfdno' [ 52.263112][ T5950] random: crng reseeded on system resumption [ 52.364971][ T5971] FAULT_INJECTION: forcing a failure. [ 52.364971][ T5971] name failslab, interval 1, probability 0, space 0, times 0 [ 52.369370][ T5971] CPU: 2 UID: 0 PID: 5971 Comm: syz.3.29 Not tainted syzkaller #0 PREEMPT(full) [ 52.369385][ T5971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.369391][ T5971] Call Trace: [ 52.369395][ T5971] [ 52.369399][ T5971] dump_stack_lvl+0x100/0x190 [ 52.369415][ T5971] should_fail_ex.cold+0x5/0xa [ 52.369429][ T5971] should_failslab+0xc2/0x120 [ 52.369443][ T5971] kmem_cache_alloc_noprof+0x91/0x6a0 [ 52.369456][ T5971] ? trace_kmem_cache_alloc+0xdd/0x100 [ 52.369469][ T5971] ? security_file_alloc+0x34/0x2c0 [ 52.369489][ T5971] security_file_alloc+0x34/0x2c0 [ 52.369506][ T5971] init_file+0x95/0x480 [ 52.369518][ T5971] alloc_empty_file+0x79/0x1c0 [ 52.369532][ T5971] path_openat+0xe7/0x4280 [ 52.369542][ T5971] ? __kasan_slab_alloc+0x89/0x90 [ 52.369554][ T5971] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 52.369565][ T5971] ? do_getname+0x35/0x390 [ 52.369577][ T5971] ? do_sys_openat2+0xc7/0x1e0 [ 52.369591][ T5971] ? __x64_sys_openat+0x12d/0x210 [ 52.369609][ T5971] ? do_syscall_64+0x115/0x870 [ 52.369625][ T5971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.369646][ T5971] ? __pfx_path_openat+0x10/0x10 [ 52.369669][ T5971] do_file_open+0x20e/0x430 [ 52.369687][ T5971] ? __pfx_do_file_open+0x10/0x10 [ 52.369712][ T5971] ? alloc_fd+0x471/0x7a0 [ 52.369725][ T5971] ? do_getname+0x191/0x390 [ 52.369739][ T5971] do_sys_openat2+0x10f/0x1e0 [ 52.369757][ T5971] ? __pfx_do_sys_openat2+0x10/0x10 [ 52.369770][ T5971] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 52.369783][ T5971] ? __fget_files+0x21f/0x3d0 [ 52.369795][ T5971] __x64_sys_openat+0x12d/0x210 [ 52.369809][ T5971] ? __pfx___x64_sys_openat+0x10/0x10 [ 52.369821][ T5971] ? ksys_write+0x1ac/0x250 [ 52.369854][ T5971] do_syscall_64+0x115/0x870 [ 52.369866][ T5971] ? clear_bhb_loop+0x40/0x90 [ 52.369878][ T5971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.369889][ T5971] RIP: 0033:0x7f89a279de99 [ 52.369898][ T5971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.369908][ T5971] RSP: 002b:00007f89a3714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.369919][ T5971] RAX: ffffffffffffffda RBX: 00007f89a2a25fa0 RCX: 00007f89a279de99 [ 52.369925][ T5971] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 52.369931][ T5971] RBP: 00007f89a3714090 R08: 0000000000000000 R09: 0000000000000000 [ 52.369937][ T5971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.369943][ T5971] R13: 00007f89a2a26038 R14: 00007f89a2a25fa0 R15: 00007ffd287625a8 [ 52.369956][ T5971] [ 52.372576][ T5973] Zero length message leads to an empty skb [ 52.397617][ T5734] overlayfs: failed lookup in lower (newroot/3, name='bus', err=-40): overlapping layers [ 52.469817][ T5734] overlayfs: failed lookup in lower (newroot/3, name='bus', err=-40): overlapping layers [ 52.496836][ T5981] FAULT_INJECTION: forcing a failure. [ 52.496836][ T5981] name failslab, interval 1, probability 0, space 0, times 0 [ 52.502517][ T5981] CPU: 1 UID: 0 PID: 5981 Comm: syz.3.35 Not tainted syzkaller #0 PREEMPT(full) [ 52.502541][ T5981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.502551][ T5981] Call Trace: [ 52.502558][ T5981] [ 52.502565][ T5981] dump_stack_lvl+0x100/0x190 [ 52.502593][ T5981] should_fail_ex.cold+0x5/0xa [ 52.502616][ T5981] should_failslab+0xc2/0x120 [ 52.502640][ T5981] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 52.502664][ T5981] ? __pfx_vsnprintf+0x10/0x10 [ 52.502683][ T5981] ? kvasprintf_const+0x66/0x1a0 [ 52.502712][ T5981] kvasprintf+0xbc/0x150 [ 52.502736][ T5981] ? __pfx_kvasprintf+0x10/0x10 [ 52.502757][ T5981] ? mark_held_locks+0x40/0x70 [ 52.502780][ T5981] ? lockdep_hardirqs_on+0x78/0x100 [ 52.502799][ T5981] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 52.502827][ T5981] ? klist_next+0x28e/0x510 [ 52.502851][ T5981] kvasprintf_const+0x66/0x1a0 [ 52.502884][ T5981] kobject_set_name_vargs+0x5a/0x140 [ 52.502909][ T5981] dev_set_name+0xc7/0x100 [ 52.502936][ T5981] ? __pfx_dev_set_name+0x10/0x10 [ 52.502965][ T5981] ? i2c_check_addr_busy+0x103/0x150 [ 52.502987][ T5981] ? __pfx_i2c_check_addr_busy+0x10/0x10 [ 52.503012][ T5981] i2c_new_client_device+0x653/0xd30 [ 52.503043][ T5981] new_device_store+0x20f/0x420 [ 52.503069][ T5981] ? __lock_acquire+0x49f/0x1a40 [ 52.503090][ T5981] ? __pfx_new_device_store+0x10/0x10 [ 52.503122][ T5981] ? find_held_lock+0x2b/0x80 [ 52.503148][ T5981] ? sysfs_file_kobj+0xe4/0x290 [ 52.503173][ T5981] ? sysfs_file_kobj+0xe4/0x290 [ 52.503199][ T5981] ? __pfx_new_device_store+0x10/0x10 [ 52.503223][ T5981] dev_attr_store+0x58/0x80 [ 52.503247][ T5981] ? __pfx_dev_attr_store+0x10/0x10 [ 52.503269][ T5981] sysfs_kf_write+0xf2/0x150 [ 52.503296][ T5981] kernfs_fop_write_iter+0x3e0/0x5f0 [ 52.503318][ T5981] ? __pfx_sysfs_kf_write+0x10/0x10 [ 52.503344][ T5981] vfs_write+0x6ac/0x1050 [ 52.503370][ T5981] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 52.503395][ T5981] ? __pfx_vfs_write+0x10/0x10 [ 52.503438][ T5981] ksys_write+0x12a/0x250 [ 52.503464][ T5981] ? __pfx_ksys_write+0x10/0x10 [ 52.503498][ T5981] do_syscall_64+0x115/0x870 [ 52.503515][ T5981] ? clear_bhb_loop+0x40/0x90 [ 52.503537][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.503556][ T5981] RIP: 0033:0x7f89a279de99 [ 52.503568][ T5981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.503582][ T5981] RSP: 002b:00007f89a3714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.503600][ T5981] RAX: ffffffffffffffda RBX: 00007f89a2a25fa0 RCX: 00007f89a279de99 [ 52.503610][ T5981] RDX: 000000000000000b RSI: 0000200000000500 RDI: 0000000000000003 [ 52.503618][ T5981] RBP: 00007f89a3714090 R08: 0000000000000000 R09: 0000000000000000 [ 52.503627][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.503638][ T5981] R13: 00007f89a2a26038 R14: 00007f89a2a25fa0 R15: 00007ffd287625a8 [ 52.503659][ T5981] [ 52.503745][ T5981] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-22) [ 52.660980][ T5982] tcpci 0-0050: Can't find connector node. [ 52.669765][ T5982] tcpci 0-0050: probe with driver tcpci failed with error -22 [ 52.673863][ T5982] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 52.728657][ T5987] xt_hl: Unknown Hop Limit match mode: 206 [ 52.742522][ T5987] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 52.747123][ T5987] i2c i2c-0: Failed to register i2c client tcpci at 0x50 (-16) [ 52.821706][ T5996] FAULT_INJECTION: forcing a failure. [ 52.821706][ T5996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.822927][ T42] kauditd_printk_skb: 103 callbacks suppressed [ 52.822937][ T42] audit: type=1400 audit(1784930567.268:275): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 52.829743][ T5996] CPU: 1 UID: 0 PID: 5996 Comm: syz.1.40 Not tainted syzkaller #0 PREEMPT(full) [ 52.829759][ T5996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.829765][ T5996] Call Trace: [ 52.829769][ T5996] [ 52.829773][ T5996] dump_stack_lvl+0x100/0x190 [ 52.829792][ T5996] should_fail_ex.cold+0x5/0xa [ 52.829806][ T5996] _copy_to_user+0x32/0xd0 [ 52.829822][ T5996] simple_read_from_buffer+0xcb/0x170 [ 52.829835][ T5996] proc_fail_nth_read+0x1af/0x230 [ 52.829852][ T5996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.829870][ T5996] ? rw_verify_area+0xce/0x6d0 [ 52.829884][ T5996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.829901][ T5996] vfs_read+0x1e4/0xb40 [ 52.829919][ T5996] ? __pfx_vfs_read+0x10/0x10 [ 52.829935][ T5996] ? __fget_files+0x215/0x3d0 [ 52.829949][ T5996] ? __fget_files+0x21f/0x3d0 [ 52.829963][ T5996] ksys_read+0x12a/0x250 [ 52.829980][ T5996] ? __pfx_ksys_read+0x10/0x10 [ 52.830000][ T5996] do_syscall_64+0x115/0x870 [ 52.830012][ T5996] ? clear_bhb_loop+0x40/0x90 [ 52.830025][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.830036][ T5996] RIP: 0033:0x7f5af6f5e6ce [ 52.830047][ T5996] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.830057][ T5996] RSP: 002b:00007f5af51f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.830068][ T5996] RAX: ffffffffffffffda RBX: 00007f5af51f66c0 RCX: 00007f5af6f5e6ce [ 52.830075][ T5996] RDX: 000000000000000f RSI: 00007f5af51f60a0 RDI: 0000000000000004 [ 52.830081][ T5996] RBP: 00007f5af51f6090 R08: 0000000000000000 R09: 0000000000000000 [ 52.830088][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.830094][ T5996] R13: 00007f5af7226038 R14: 00007f5af7225fa0 R15: 00007ffed8dc4d18 [ 52.830107][ T5996] [ 53.002745][ T42] audit: type=1400 audit(1784930567.448:276): avc: denied { mounton } for pid=6000 comm="syz.1.42" path="/12/gadget/dummy_udc" dev="gadgetfs" ino=8794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=file permissive=1 [ 53.003438][ T6003] overlayfs: missing 'lowerdir' [ 53.116283][ T42] audit: type=1400 audit(1784930567.568:277): avc: denied { read } for pid=6008 comm="syz.3.44" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 53.124737][ T42] audit: type=1400 audit(1784930567.568:278): avc: denied { open } for pid=6008 comm="syz.3.44" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 53.134301][ T42] audit: type=1400 audit(1784930567.568:279): avc: denied { ioctl } for pid=6008 comm="syz.3.44" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x644b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 53.206042][ T6007] warning: `syz.1.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.214778][ T5829] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.272021][ T42] audit: type=1400 audit(1784930567.718:280): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 53.302172][ T6013] IPVS: length: 220 != 8 [ 53.304548][ T42] audit: type=1400 audit(1784930567.748:281): avc: denied { write } for pid=6012 comm="syz.1.45" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.369788][ T42] audit: type=1400 audit(1784930567.818:282): avc: denied { remount } for pid=6016 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.387502][ T5829] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 53.389907][ T42] audit: type=1400 audit(1784930567.838:283): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.390615][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.414014][ T5829] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 002 [ 53.521372][ T6023] capability: warning: `syz.1.50' uses 32-bit capabilities (legacy support in use) [ 53.528143][ T42] audit: type=1400 audit(1784930567.978:284): avc: denied { setopt } for pid=6022 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.588674][ T6023] nvme_fabrics: missing parameter 'transport=%s' [ 53.590852][ T6023] nvme_fabrics: missing parameter 'nqn=%s' [ 53.600669][ T6022] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 53.603095][ T6022] ALSA: mixer_oss: invalid index 137438 [ 53.605803][ T6022] ALSA: mixer_oss: invalid OSS volume '' [ 53.607711][ T6022] ALSA: mixer_oss: invalid OSS volume '' [ 53.609641][ T6022] ALSA: mixer_oss: invalid OSS volume '’' [ 53.611555][ T6022] ALSA: mixer_oss: invalid OSS volume '' [ 53.613416][ T6022] ALSA: mixer_oss: invalid OSS volume '' [ 53.615565][ T6022] ALSA: mixer_oss: invalid OSS volume '' [ 53.617642][ T6022] ALSA: mixer_oss: invalid OSS volume '' [ 53.619981][ T6022] ALSA: mixer_oss: invalid OSS volume '' [ 53.661221][ T6026] FAULT_INJECTION: forcing a failure. [ 53.661221][ T6026] name failslab, interval 1, probability 0, space 0, times 0 [ 53.666596][ T6026] CPU: 2 UID: 0 PID: 6026 Comm: syz.1.51 Not tainted syzkaller #0 PREEMPT(full) [ 53.666620][ T6026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.666629][ T6026] Call Trace: [ 53.666636][ T6026] [ 53.666643][ T6026] dump_stack_lvl+0x100/0x190 [ 53.666668][ T6026] should_fail_ex.cold+0x5/0xa [ 53.666688][ T6026] should_failslab+0xc2/0x120 [ 53.666708][ T6026] kmem_cache_alloc_noprof+0x91/0x6a0 [ 53.666727][ T6026] ? do_getname+0x35/0x390 [ 53.666750][ T6026] do_getname+0x35/0x390 [ 53.666773][ T6026] do_sys_openat2+0xc7/0x1e0 [ 53.666797][ T6026] ? __pfx_do_sys_openat2+0x10/0x10 [ 53.666819][ T6026] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 53.666838][ T6026] ? __fget_files+0x21f/0x3d0 [ 53.666858][ T6026] __x64_sys_openat+0x12d/0x210 [ 53.666877][ T6026] ? __pfx___x64_sys_openat+0x10/0x10 [ 53.666895][ T6026] ? ksys_write+0x1ac/0x250 [ 53.666926][ T6026] do_syscall_64+0x115/0x870 [ 53.666946][ T6026] ? clear_bhb_loop+0x40/0x90 [ 53.666967][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.666983][ T6026] RIP: 0033:0x7f5af6f9de99 [ 53.666996][ T6026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.667010][ T6026] RSP: 002b:00007f5af51f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 53.667025][ T6026] RAX: ffffffffffffffda RBX: 00007f5af7225fa0 RCX: 00007f5af6f9de99 [ 53.667035][ T6026] RDX: 0000000000000000 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 53.667044][ T6026] RBP: 00007f5af51f6090 R08: 0000000000000000 R09: 0000000000000000 [ 53.667053][ T6026] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 53.667061][ T6026] R13: 00007f5af7226038 R14: 00007f5af7225fa0 R15: 00007ffed8dc4d18 [ 53.667083][ T6026] [ 53.813232][ T5829] (null): failure reading functionality [ 54.015699][ T6005] FAULT_INJECTION: forcing a failure. [ 54.015699][ T6005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.019700][ T6005] CPU: 2 UID: 0 PID: 6005 Comm: syz.0.43 Not tainted syzkaller #0 PREEMPT(full) [ 54.019715][ T6005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.019721][ T6005] Call Trace: [ 54.019726][ T6005] [ 54.019730][ T6005] dump_stack_lvl+0x100/0x190 [ 54.019747][ T6005] should_fail_ex.cold+0x5/0xa [ 54.019761][ T6005] _copy_from_iter+0x1f4/0x1690 [ 54.019778][ T6005] ? __pfx__copy_from_iter+0x10/0x10 [ 54.019792][ T6005] ? trace_kmalloc+0xeb/0x110 [ 54.019805][ T6005] ? __kasan_kmalloc+0xaa/0xb0 [ 54.019817][ T6005] ? __kmalloc_noprof+0x343/0x820 [ 54.019829][ T6005] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 54.019846][ T6005] kernfs_fop_write_iter+0x186/0x5f0 [ 54.019861][ T6005] vfs_write+0x6ac/0x1050 [ 54.019878][ T6005] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 54.019892][ T6005] ? __pfx_vfs_write+0x10/0x10 [ 54.019916][ T6005] ksys_write+0x12a/0x250 [ 54.019932][ T6005] ? __pfx_ksys_write+0x10/0x10 [ 54.019951][ T6005] do_syscall_64+0x115/0x870 [ 54.019963][ T6005] ? clear_bhb_loop+0x40/0x90 [ 54.019975][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.019986][ T6005] RIP: 0033:0x7f473bb9de99 [ 54.019996][ T6005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.020006][ T6005] RSP: 002b:00007f473ca52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.020016][ T6005] RAX: ffffffffffffffda RBX: 00007f473be25fa0 RCX: 00007f473bb9de99 [ 54.020023][ T6005] RDX: 0000000000000011 RSI: 0000200000000a00 RDI: 0000000000000004 [ 54.020029][ T6005] RBP: 00007f473ca52090 R08: 0000000000000000 R09: 0000000000000000 [ 54.020035][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.020041][ T6005] R13: 00007f473be26038 R14: 00007f473be25fa0 R15: 00007ffe350a7658 [ 54.020054][ T6005] [ 54.022758][ T5829] i2c i2c-2: failure reading functionality [ 54.087746][ T5829] i2c i2c-2: connected i2c-tiny-usb device [ 54.095056][ T5829] usb 5-1: USB disconnect, device number 2 [ 54.134859][ T5739] Bluetooth: hci0: command tx timeout [ 54.135297][ T5738] Bluetooth: hci1: command tx timeout [ 54.193399][ T6035] serio: Serial port ptm0 [ 54.215635][ T5738] Bluetooth: hci2: command tx timeout [ 54.402210][ T6040] ci_hdrc ci_hdrc.0: error -EINVAL: invalid resource (null) [ 54.405352][ T6040] ci_hdrc ci_hdrc.0: probe with driver ci_hdrc failed with error -22 [ 54.454925][ T1353] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.507682][ T5785] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.577232][ T5785] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.607602][ T1353] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 54.610530][ T1353] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.621603][ T1353] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 002 [ 54.677401][ T5785] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.699673][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.704388][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.708458][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.712947][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.717760][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.772843][ T5785] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.885496][ T56] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.898620][ T5785] bridge_slave_1: left allmulticast mode [ 54.900846][ T5785] bridge_slave_1: left promiscuous mode [ 54.903426][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.909857][ T5785] bridge_slave_0: left allmulticast mode [ 54.911712][ T5785] bridge_slave_0: left promiscuous mode [ 54.913855][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.024887][ T1353] (null): failure reading functionality [ 55.028341][ T5785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.033388][ T5785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.039563][ T56] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 55.040289][ T5785] bond0 (unregistering): Released all slaves [ 55.043123][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.047543][ T56] i2c-tiny-usb 5-1:1.0: version 1.00 found at bus 005 address 003 [ 55.200405][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.244277][ T1353] i2c i2c-2: failure reading functionality [ 55.258558][ T1353] i2c i2c-2: connected i2c-tiny-usb device [ 55.273333][ T1353] usb 8-1: USB disconnect, device number 2 [ 55.397134][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.399571][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.402533][ T6047] bridge_slave_0: entered allmulticast mode [ 55.406270][ T6047] bridge_slave_0: entered promiscuous mode [ 55.418652][ T5785] hsr_slave_0: left promiscuous mode [ 55.423455][ T5785] hsr_slave_1: left promiscuous mode [ 55.425554][ T5785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.430780][ T5785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.433837][ T5785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.439335][ T5785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.449823][ T5785] veth1_macvtap: left promiscuous mode [ 55.451616][ T5785] veth0_macvtap: left promiscuous mode [ 55.453327][ T5785] veth1_vlan: left promiscuous mode [ 55.456564][ T5785] veth0_vlan: left promiscuous mode [ 55.488150][ T56] (null): failure reading functionality [ 55.585670][ T5785] team0 (unregistering): Port device team_slave_1 removed [ 55.593572][ T5785] team0 (unregistering): Port device team_slave_0 removed [ 55.663506][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.666825][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.669606][ T6047] bridge_slave_1: entered allmulticast mode [ 55.673671][ T6047] bridge_slave_1: entered promiscuous mode [ 55.693166][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 55.731879][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.745574][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.762465][ T6047] team0: Port device team_slave_0 added [ 55.767931][ T6047] team0: Port device team_slave_1 added [ 55.792106][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.810022][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.819649][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.824884][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.827527][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.836625][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.864407][ T6047] hsr_slave_0: entered promiscuous mode [ 55.867621][ T6047] hsr_slave_1: entered promiscuous mode [ 55.870139][ T6047] debugfs: 'hsr0' already exists in 'hsr' [ 55.872089][ T6047] Cannot create hsr debugfs directory [ 55.989253][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 56.022072][ T6047] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.026462][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.029889][ T6047] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.035759][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.038540][ T6047] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.042875][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.046318][ T6047] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.051089][ T6047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.119275][ T5738] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 56.188571][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.215839][ T5738] Bluetooth: hci1: command tx timeout [ 56.224808][ T5738] Bluetooth: hci0: command tx timeout [ 56.238127][ T6047] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.259596][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.262396][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.280172][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.282987][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.295335][ T5738] Bluetooth: hci2: command tx timeout [ 56.331258][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 56.746195][ T6047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.774701][ T5738] Bluetooth: hci3: command tx timeout [ 56.924666][ T5843] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 56.930031][ T6047] veth0_vlan: entered promiscuous mode [ 56.939727][ T6047] veth1_vlan: entered promiscuous mode [ 56.966756][ T6047] veth0_macvtap: entered promiscuous mode [ 56.978151][ T6047] veth1_macvtap: entered promiscuous mode [ 56.999953][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.011966][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.022212][ T5812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.024952][ T5812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.028086][ T5812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.035297][ T5812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.085899][ T5843] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 57.092457][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.142113][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.147693][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.152754][ T5843] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 003 [ 57.178122][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.180644][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.505767][ T56] i2c i2c-2: failure reading functionality [ 57.506539][ T6046] i2c i2c-2: failure writing data [ 57.511846][ T6046] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 57.515104][ T56] i2c i2c-2: connected i2c-tiny-usb device [ 57.515429][ T6046] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 57.524025][ T6046] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 57.542138][ T55] usb 5-1: USB disconnect, device number 3 [ 57.566019][ T5843] (null): failure reading functionality [ 57.612251][ T6125] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000028: 0000 [#1] SMP KASAN NOPTI [ 57.617039][ T6125] KASAN: null-ptr-deref in range [0x0000000000000140-0x0000000000000147] [ 57.620398][ T6125] CPU: 2 UID: 0 PID: 6125 Comm: syz.3.68 Not tainted syzkaller #0 PREEMPT(full) [ 57.623391][ T6125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.627444][ T6125] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 57.629898][ T6125] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 0e 33 43 09 66 66 2e 0f 1f 84 00 00 00 [ 57.636763][ T6125] RSP: 0018:ffffc900040df4b0 EFLAGS: 00010286 [ 57.639062][ T6125] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 57.642170][ T6125] RDX: 0000000000000000 RSI: ffffffff81e53a84 RDI: dffffc0000000028 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 57.645292][ T6125] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 57.648653][ T6125] R10: 0000000000000000 R11: 00000000000058f0 R12: ffffffff81e53a84 [ 57.651764][ T6125] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 57.654950][ T6125] FS: 00007f89a37146c0(0000) GS:ffff8880d5fde000(0000) knlGS:0000000000000000 [ 57.658608][ T6125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.661372][ T6125] CR2: 0000001b33cfc000 CR3: 00000001133d0000 CR4: 0000000000352ef0 [ 57.664650][ T6125] Call Trace: [ 57.666076][ T6125] [ 57.667334][ T6125] __kasan_check_byte+0x13/0x50 [ 57.669254][ T6125] lock_acquire+0x132/0x370 [ 57.671140][ T6125] ? __pfx___might_resched+0x10/0x10 [ 57.673243][ T6125] ? __lock_acquire+0x49f/0x1a40 [ 57.675075][ T6125] down_write_nested+0x94/0x200 [ 57.676782][ T6125] ? start_dirop+0x4b/0xb0 [ 57.678651][ T6125] ? __pfx_down_write_nested+0x10/0x10 [ 57.680966][ T6125] ? full_name_hash+0xbc/0x100 [ 57.682990][ T6125] start_dirop+0x4b/0xb0 [ 57.684748][ T6125] simple_start_creating+0xf9/0x110 [ 57.686913][ T6125] ? __pfx_simple_start_creating+0x10/0x10 [ 57.689316][ T6125] ? mntput+0x70/0xa0 [ 57.691039][ T6125] ? simple_pin_fs+0xa3/0x190 [ 57.692937][ T6125] debugfs_start_creating.part.0+0x82/0x170 [ 57.695354][ T6125] debugfs_create_dir+0x72/0x440 [ 57.697350][ T6125] i2c_device_probe+0x5f5/0xd10 [ 57.699338][ T6125] ? kernfs_put+0x3f/0x60 [ 57.701237][ T6125] ? __pfx_i2c_device_probe+0x10/0x10 [ 57.703496][ T6125] ? sysfs_create_link+0x68/0xc0 [ 57.705473][ T6125] ? __pfx_i2c_device_probe+0x10/0x10 [ 57.707312][ T6125] really_probe+0x241/0xa60 [ 57.709191][ T6125] __driver_probe_device+0x20e/0x450 [ 57.711428][ T6125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.713866][ T6125] driver_probe_device+0x4a/0x140 [ 57.716001][ T6125] __device_attach_driver+0x1df/0x320 [ 57.718057][ T6125] ? __pfx___device_attach_driver+0x10/0x10 [ 57.720477][ T6125] bus_for_each_drv+0x159/0x1e0 [ 57.722564][ T6125] ? __pfx_bus_for_each_drv+0x10/0x10 [ 57.724809][ T6125] ? lockdep_hardirqs_on+0x78/0x100 [ 57.727007][ T6125] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 57.729412][ T6125] __device_attach+0x1e4/0x4d0 [ 57.731472][ T6125] ? __pfx___device_attach+0x10/0x10 [ 57.733681][ T6125] ? do_raw_spin_unlock+0x145/0x1e0 [ 57.735884][ T6125] device_initial_probe+0xaf/0xd0 [ 57.737966][ T6125] bus_probe_device+0x64/0x160 [ 57.739933][ T6125] device_add+0x121d/0x1970 [ 57.741901][ T6125] ? __pfx_device_add+0x10/0x10 [ 57.743953][ T6125] ? lockdep_init_map_type+0x5c/0x250 [ 57.746211][ T6125] ? __init_waitqueue_head+0xca/0x150 [ 57.748420][ T6125] i2c_new_client_device+0x660/0xd30 [ 57.750675][ T6125] new_device_store+0x20f/0x420 [ 57.752601][ T6125] ? __lock_acquire+0x49f/0x1a40 [ 57.754604][ T6125] ? __pfx_new_device_store+0x10/0x10 [ 57.756717][ T6125] ? find_held_lock+0x2b/0x80 [ 57.758725][ T6125] ? sysfs_file_kobj+0xe4/0x290 [ 57.760847][ T6125] ? sysfs_file_kobj+0xe4/0x290 [ 57.762886][ T6125] ? __pfx_new_device_store+0x10/0x10 [ 57.765045][ T6125] dev_attr_store+0x58/0x80 [ 57.766977][ T6125] ? __pfx_dev_attr_store+0x10/0x10 [ 57.769159][ T6125] sysfs_kf_write+0xf2/0x150 [ 57.771085][ T6125] kernfs_fop_write_iter+0x3e0/0x5f0 [ 57.773268][ T6125] ? __pfx_sysfs_kf_write+0x10/0x10 [ 57.775464][ T6125] vfs_write+0x6ac/0x1050 [ 57.777309][ T6125] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 57.779743][ T6125] ? __pfx_vfs_write+0x10/0x10 [ 57.781624][ T6125] ksys_write+0x12a/0x250 [ 57.782982][ T6125] ? __pfx_ksys_write+0x10/0x10 [ 57.784544][ T6125] do_syscall_64+0x115/0x870 [ 57.786051][ T6125] ? clear_bhb_loop+0x40/0x90 [ 57.787939][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.790074][ T6125] RIP: 0033:0x7f89a279de99 [ 57.791461][ T6125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.798337][ T6125] RSP: 002b:00007f89a3714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.801831][ T6125] RAX: ffffffffffffffda RBX: 00007f89a2a25fa0 RCX: 00007f89a279de99 [ 57.804780][ T6125] RDX: 0000000000000011 RSI: 0000200000000a00 RDI: 0000000000000004 [ 57.807366][ T6125] RBP: 00007f89a2833eaf R08: 0000000000000000 R09: 0000000000000000 [ 57.810140][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.813406][ T6125] R13: 00007f89a2a26038 R14: 00007f89a2a25fa0 R15: 00007ffd287625a8 [ 57.816499][ T6125] [ 57.817547][ T6125] Modules linked in: [ 57.819523][ T6125] ---[ end trace 0000000000000000 ]--- [ 57.822777][ T6125] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 57.823917][ T5843] i2c i2c-3: failure reading functionality [ 57.824991][ T6125] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 e9 0e 33 43 09 66 66 2e 0f 1f 84 00 00 00 [ 57.827182][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 57.827192][ T42] audit: type=1400 audit(1784930572.278:315): avc: denied { read } for pid=5128 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 57.833301][ T6125] RSP: 0018:ffffc900040df4b0 EFLAGS: 00010286 [ 57.834134][ T5843] i2c i2c-3: connected i2c-tiny-usb device [ 57.847131][ T6125] [ 57.847689][ T42] audit: type=1400 audit(1784930572.278:316): avc: denied { search } for pid=5128 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.851523][ T6125] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 57.864632][ T42] audit: type=1400 audit(1784930572.278:317): avc: denied { write search } for pid=5128 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.883013][ T6125] RDX: 0000000000000000 RSI: ffffffff81e53a84 RDI: dffffc0000000028 [ 57.884673][ T42] audit: type=1400 audit(1784930572.278:318): avc: denied { add_name } for pid=5128 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.886616][ T6125] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 57.892762][ T42] audit: type=1400 audit(1784930572.278:319): avc: denied { create } for pid=5128 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.892785][ T42] audit: type=1400 audit(1784930572.278:320): avc: denied { append open } for pid=5128 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.892802][ T42] audit: type=1400 audit(1784930572.278:321): avc: denied { getattr } for pid=5128 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.897235][ T6125] R10: 0000000000000000 R11: 00000000000058f0 R12: ffffffff81e53a84 [ 57.923735][ T6125] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 57.930321][ T6125] FS: 00007f89a37146c0(0000) GS:ffff8880d5fde000(0000) knlGS:0000000000000000 [ 57.934018][ T6125] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.938050][ T6125] CR2: 00007f1c40c3d708 CR3: 00000001133d0000 CR4: 0000000000352ef0 [ 57.941407][ T6125] Kernel panic - not syncing: Fatal exception [ 57.944801][ T6125] Kernel Offset: disabled [ 57.946552][ T6125] Rebooting in 86400 seconds..